t_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = geteuid() stat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(r3, r4, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x1044142, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r6, 0x208200) r7 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffff, 0x8000) ioctl$NS_GET_NSTYPE(r7, 0xb703, 0x0) sendfile(r1, r5, 0x0, 0x8000fffffffe) [ 262.058279][ T9574] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 01:41:02 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r2}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002) 01:41:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000280)) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x14) write$P9_RGETLOCK(r2, &(0x7f0000000180)={0x22, 0x37, 0x2, {0x2, 0xffffffffffffffc0, 0x8, r0, 0x4, 'bdev'}}, 0x22) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0xb132903db887878f) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010202000270f7f8", 0x16}], 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x4) keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x194) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000200)={0x8000000, 0x70, 0x6}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000080)={0x0, 0x7, 0x1012}) 01:41:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f00000001c0)) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r2, 0x1d7) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='n', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 262.274425][ T9586] mmap: syz-executor.2 (9586) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 01:41:02 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000cd0fc8)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 01:41:03 executing program 2: r0 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r3 = dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x2002, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x80000001, 0x0) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000200)={0x1, 0x7, [{r5, 0x0, 0x2fffff000, 0xfffffffff0000000}, {r6, 0x0, 0xfffffffff0005000}, {0xffffffffffffffff, 0x0, 0x100000000}, {r7, 0x0, 0x1016000, 0x1000000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x4000, 0x1000000000000}, {r9, 0x0, 0xfffefffff0008000, 0x4000}]}) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000000c0)={0x1f, 0x4, 0x5, 0x7, 0x2, 0x8, 0x3f, 0x5, 0x3f, 0x55, 0x2}, 0xb) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0x80000001, 0x0) setsockopt$rose(r11, 0x104, 0x5, &(0x7f0000000100), 0x4) 01:41:03 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x5a8, 0x0, 0x0, 0x150, 0x150, 0x2b0, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d4, 0x4d5, 0x8, 0x4}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x58, 0x2b, 0x400, 0x38, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}, @mcast2, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff, 0xffffffff], 'veth1_to_bond\x00', 'vxcan1\x00', {}, {}, 0x87, 0x8, 0x0, 0x40}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0x7f}}, @common=@dst={0x48, 'dst\x00', 0x0, {0xfff, 0x0, 0x3, [0x4, 0xd906, 0x2e21, 0x7f, 0x6, 0x25, 0x1, 0x3, 0x9, 0x5, 0x400, 0x0, 0x52c1, 0x7, 0x5, 0x1], 0xa}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x7, 0x8001}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x36f3, 0x5, 0xf9, 0x5, 0x63d22bfdd1a98183, 0x1, [@ipv4={[], [], @broadcast}, @remote, @ipv4={[], [], @broadcast}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @rand_addr="aaef997db4ee47eaf72cb6484254f1fb", @remote, @empty, @mcast1, @local, @loopback, @dev={0xfe, 0x80, [], 0x10}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @empty, @empty], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x5ca1, 0x0, 0x0, 0x0, 0x2, 0xfffffffc}, r1, 0xffffffffffffffff, r0, 0x2) read(r2, &(0x7f0000000000)=""/183, 0xb7) [ 262.646917][ T9584] FAT-fs (loop1): Directory bread(block 513) failed [ 262.654604][ T9584] FAT-fs (loop1): Directory bread(block 514) failed [ 262.684573][ T9584] FAT-fs (loop1): Directory bread(block 515) failed [ 262.697917][ T9584] FAT-fs (loop1): Directory bread(block 516) failed [ 262.787115][ T9584] FAT-fs (loop1): Directory bread(block 517) failed 01:41:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x11, 0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) [ 262.857523][ T9584] FAT-fs (loop1): Directory bread(block 518) failed [ 262.892310][ T9584] FAT-fs (loop1): Directory bread(block 519) failed 01:41:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x2}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x141200) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0x7ff]}, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000400)={0x40ce, 0x8000, 0x1, 0x3, 0x0}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000480)={r4, 0xec63}, 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U+', 0x7}, 0x28, 0x0) 01:41:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xea) dup2(r1, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)) timer_settime(r2, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 262.937088][ T9584] FAT-fs (loop1): Directory bread(block 520) failed [ 262.944373][ T9584] FAT-fs (loop1): Directory bread(block 521) failed [ 263.024568][ T9627] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 263.141105][ T9584] FAT-fs (loop1): Directory bread(block 522) failed 01:41:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(r0, &(0x7f0000000080)=0x8c, 0xffffffffffffffff, &(0x7f0000000100)=0xff, 0x3, 0x8) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000180007121dff18946f610500020000001f003e0104000100080005000400ff7e280000001100ff000000000000eff24d8238cfa50223f7efbf7600000000000000000000000b0000", 0x4c}], 0x1}, 0x0) [ 263.383664][ T9638] 9pnet: bogus RWRITE count (2 > 1) [ 263.426271][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:41:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r4, 0xa96, 0x4, [0x1, 0x9, 0x7, 0x80]}, &(0x7f00000000c0)=0x10) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001", 0x33, 0x10000}], 0x0, 0x0) 01:41:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="ffffffffffffffde280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000040)={@loopback, r8}, 0x14) keyctl$assume_authority(0x10, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x1c}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r9 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_DQEVENT(r9, 0x80885659, &(0x7f00000000c0)={0x0, @data}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000200)={0x3, 0x100000000098f907, 0x3, [0x100000000000000]}) 01:41:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x140c0100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 01:41:04 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) link(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='./bus/file1\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) write$9p(r0, &(0x7f0000000100)="15", 0x1) prctl$PR_SET_TSC(0x1a, 0x1) unlink(&(0x7f0000000080)='./bus/file1\x00') syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f00000001c0)='./bus/file1\x00', 0x6, 0x5, &(0x7f0000000600)=[{&(0x7f00000002c0)="bf1bc8721f2cf2bd7286251c8cc7d5503da6695c71ce088301b46572a5293fa6c895c1a53d6525322c56b54a3e3330f52624561c931fbeee78e74b5ff5f65429cdff1598b28f22538800ec7c094e9cb440c7a187dccbb0fa261f24506a0788316fe5dc8e07a8acc3b7bc0d7c1b", 0x6d, 0xfff}, {&(0x7f0000000340)="c0c6fd3a78d5da7896c05a5369d04d706bdef2f57eee3a736ed6ee7369f05f9cf70909681e575f8fd755f99a23bc5598c61760faddfd838702d8ae40ace25b1653de32f9913e81475ed1832217d9703a28e2a2681be3f34d4ec79f80ddf7822916706aa1186e09417e6f51f0fd4b1c761ff98d561fd491895d4a81cd12b4fbceea9aa1052d3defe14cd81255dee949b2907d6546cf5496ecac1e537be2ede1d0ef6a72599981faf6", 0xa8}, {&(0x7f0000000540)="69ccf43239845d5f5ee32134b73a76a3c7385098", 0x14, 0x7}, {&(0x7f0000000580)="654d5ae8b61d194b42c332ea42bb2301c7d5d6f3f5f0", 0x16, 0x80000001}, {&(0x7f00000005c0)="d2fb882587eec3f79e890c5f903b38debb45866733d75b9258ccbdece063d255986efd7d1f0e3359423321aa1228a05983c86d360edf2374f0a87c4128", 0x3d}], 0x40, &(0x7f0000000680)={[{@noattrs='noattrs'}], [{@audit='audit'}, {@obj_user={'obj_user', 0x3d, 'overlay\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}) 01:41:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@random={'security.', '/proc/self//exe\x00'}, &(0x7f0000000200)='vmnet0\x00', 0x7, 0x0) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r3, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000280)=0x8a1b, 0x4) [ 263.865246][ T9665] overlayfs: failed to resolve './file0]>{dIt S6GG^f+@k3VHT/b2J]l$pRɊL [ 263.865246][ T9665] ]qtc͝͠r.p0p': -2 01:41:04 executing program 3: set_mempolicy(0x8003, &(0x7f0000000300), 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socket$alg(0x26, 0x5, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) keyctl$clear(0x7, 0x0) ftruncate(r2, 0x1000000) sendfile(r0, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:41:04 executing program 5: r0 = memfd_create(&(0x7f0000000240)='b\x00\x00\x00\x10', 0x5) r1 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r0, 0x0) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000280)={&(0x7f0000000000/0x2000)=nil, 0xda, 0x2, 0x44, &(0x7f0000000000/0x8000)=nil, 0x1f}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/Zet/uu\x8e\x1f', 0x4c0002, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r9, 0x400454ce, r10) getgroups(0x4, &(0x7f0000000180)=[r10, 0xee01, 0xee01, 0x0]) r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) r13 = getpid() sched_setscheduler(r13, 0x5, &(0x7f0000000380)) shmctl$IPC_SET(r4, 0x1, &(0x7f00000001c0)={{0x5, r6, r7, r8, r11, 0x0, 0x40}, 0xfa4d, 0x7fffffff, 0x7, 0x7, r12, r13, 0x3e}) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 01:41:04 executing program 4: r0 = getpid() chmod(&(0x7f0000000000)='./file0\x00', 0x4) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)=ANY=[], &(0x7f0000000240)='}\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x5) socket$l2tp(0x18, 0x1, 0x1) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000100)) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x400100, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socket$caif_stream(0x25, 0x1, 0x0) accept4(r4, 0x0, &(0x7f0000000200), 0x180800) socket$inet_tcp(0x2, 0x1, 0x0) dup3(r2, r1, 0x0) 01:41:04 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) [ 264.125312][ T9665] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "audit" [ 264.401506][ T9665] overlayfs: failed to resolve './file0]>{dIt S6GG^f+@k3VHT/b2J]l$pRɊL [ 264.401506][ T9665] ]qtc͝͠r.p0p': -2 01:41:04 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2010008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x0, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) 01:41:04 executing program 2: getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=0x1) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x0, 0x59d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffe}}, 0x0, 0x0, 0x0, 0x80000000000000, 0x4e95be9ae3034b6f}, 0x0) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$int_in(0xffffffffffffffff, 0x80000000005016, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2f0000000400000000000000100000000400001c000000000600000000008e238f71df375e00"/47], 0x2f) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(r1) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000005c0)={0x93b7, 0x3, 0x0, 0x20, 0x100000001, 0x2, 0x8}) setpriority(0x0, r2, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) [ 264.705221][ T9709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9709 comm=syz-executor.1 01:41:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @multicast2}], 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x105680, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="480001001400190d09004beafd0cca00000f7f897b8acceca946a872e9bf331f4ff407000000200000000101ff83bd800309ff5bffff00c7e5ed5e000000000000000000ddffffff276eeebaf161bcf44e0d580ecca40befc72d8a9a533087191c00", 0xfeea}], 0x10000000000000d1) 01:41:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x8) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {0x0, 0x0, 0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x400e) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast2, @in=@rand_addr=0xfff, 0x4e22, 0x9, 0x4e24, 0x5, 0x2, 0xe0, 0xa0, 0x3e, r3, r5}, {0x2, 0x6, 0x10001, 0x80000000, 0x40, 0x400, 0xce4, 0x6}, {0x9, 0x9, 0xfffffffffffffffb, 0x3ff}, 0x5, 0x6e6bbb, 0x1, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d5, 0x2b}, 0x0, @in=@empty, 0x0, 0x7, 0x0, 0x9, 0x8, 0x7, 0x8}}, 0xe8) r6 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r6, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) [ 265.095083][ T9728] input: syz1 as /devices/virtual/input/input5 [ 267.624597][ T9679] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.632150][ T9679] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.313629][ T9688] device veth3 entered promiscuous mode 01:41:11 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="ffffffffffffffde280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000040)={@loopback, r8}, 0x14) keyctl$assume_authority(0x10, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x1c}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r9 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_DQEVENT(r9, 0x80885659, &(0x7f00000000c0)={0x0, @data}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000200)={0x3, 0x100000000098f907, 0x3, [0x100000000000000]}) 01:41:11 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x203, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffff9c, 0x8, &(0x7f00000006c0)={0x5}, 0x8, 0x10, 0x0}, 0x70) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x2}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x675fc567862a144a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f00000003c0)=0x458) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000040)={0x10001, 0x8, 0x9, 0x80000001}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000240)={0x2, 0x92, "9880a9ff9b6676db7ca3ec6febd36a3f16fa3f0f529a25f20fcc9acdb59cf46b9333bedf3302082722448295ab97e718d8bef300104f92bc0a6830cd6e7ddf351ad50d55c29f58dc82173ac231bebbfba629ad8ec84b082c0ebe6aeb4ac8e83952ab8d47d29b7c891578d5526a010f2be688fb4fef3b3565e23fa290b3702a1c116153c695ec1da73ab5d1e5bfb67d00660b"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 01:41:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x810004, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@access_any='access=any'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise='appraise'}]}}) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000540), 0x10000000000002f4) 01:41:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0xc8, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x11}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) fanotify_init(0x4, 0x1000) 01:41:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getpid() setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000280)=""/101) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0xff00) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x0, 0x6) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x0, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)=ANY=[@ANYBLOB="0100010000000000f4ce3fa0c9cb488b6190f2d1d89677354590dde50db3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc179c36d73b6dc29274ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86ab856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a00a3c02db0343eb7e775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b"], &(0x7f0000000540)=0x1) setuid(0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000540)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000c00)=ANY=[], &(0x7f0000000540)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380), 0x0) request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) keyctl$chown(0x4, 0x0, 0x0, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) socket$inet6_tcp(0xa, 0x1, 0x0) 01:41:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="ffffffffffffffde280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000040)={@loopback, r8}, 0x14) keyctl$assume_authority(0x10, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x1c}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r9 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_DQEVENT(r9, 0x80885659, &(0x7f00000000c0)={0x0, @data}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000200)={0x3, 0x100000000098f907, 0x3, [0x100000000000000]}) 01:41:11 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x49b, 0x9}, 0xc) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xc0ed0000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 271.515563][ T9743] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 271.544200][ T9747] ptrace attach of "/root/syz-executor.5"[9211] was attempted by " 0 p 127.0.0.1 ./file0   9p p   trans=tcp,port=0x0000000000004e20,access=any,rootcontext=staff_u,appraise, @ ="[97 01:41:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000001600)={0xa, 0x4e23, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0xe}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="240000f9ffffffff2800000032000000fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 01:41:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="d6ac7d3f595131008901"], 0xa) close(r3) socket(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a", 0x11}], 0x1143) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) 01:41:12 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x100, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 272.061694][ T9751] device veth3 entered promiscuous mode [ 272.089197][ T9766] device nr0 entered promiscuous mode [ 272.099814][ T9752] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 272.127682][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9787 comm=syz-executor.4 [ 272.158738][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9787 comm=syz-executor.4 [ 272.177679][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9787 comm=syz-executor.4 [ 272.209512][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9787 comm=syz-executor.4 01:41:12 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) tkill(0xffffffffffffffff, 0x33) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$nfc_llcp(r1, &(0x7f0000000500)={0x27, 0x1, 0x2, 0x6, 0x3f, 0x4d, "85bcebefb7e457a48567ebdd287b8eeb7ff85de9581e3cbbb6896e1b8326d86c021402c6d375c6be432d6569a4984403e7da8549e3aa168b424e516eae65a5", 0x3}, 0x60) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x4197, 0x0, 0x2, 0x4}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000100)={0xffffffffa6721263, r3, 0x10001}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x0, 0x7}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r4 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/softnet_stat\x00') preadv(r5, &(0x7f00000017c0), 0x199, 0x0) write$FUSE_STATFS(r5, &(0x7f0000000400)={0x60, 0x0, 0x5, {{0x2, 0x5, 0x5ee1ddab, 0x9, 0x10000, 0x7, 0x8001, 0x9}}}, 0x60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000380)) r6 = getpgrp(0x0) setpriority(0x0, r6, 0xffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a363a00be468c151fa1bb01ce9c4c234de712af313d0a2be284971329fbaf67baebdea479188535056cbb66a4b7fa83da734dd8320e701db2"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) [ 272.236402][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9787 comm=syz-executor.4 [ 272.273340][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9787 comm=syz-executor.4 [ 272.310311][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9787 comm=syz-executor.4 [ 272.352717][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9787 comm=syz-executor.4 [ 272.366407][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9787 comm=syz-executor.4 [ 272.381111][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9787 comm=syz-executor.4 [ 272.432983][ T9751] syz-executor.0 (9751) used greatest stack depth: 22440 bytes left [ 272.472869][ T9777] bond0: (slave bond_slave_0): Releasing backup interface [ 273.239318][ T9194] libceph: connect (1)[d::]:6789 error -101 [ 273.250798][ T9194] libceph: mon0 (1)[d::]:6789 connect error [ 273.587504][ T9194] libceph: connect (1)[d::]:6789 error -101 [ 273.593692][ T9194] libceph: mon0 (1)[d::]:6789 connect error [ 274.756175][ T9194] libceph: connect (1)[d::]:6789 error -101 [ 274.762316][ T9194] libceph: mon0 (1)[d::]:6789 connect error [ 275.504261][ T9781] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.511955][ T9781] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.444479][ T9785] device veth3 left promiscuous mode [ 279.590182][ T9793] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 279.624497][ T9793] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.640068][ T9793] bridge0: port 2(bridge_slave_1) entered disabled state 01:41:20 executing program 4: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() geteuid() lstat(&(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000640)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x19, &(0x7f00000000c0), 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x19, &(0x7f00000000c0), 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x19, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\b'], 0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x19, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06000000"], 0x8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x1f) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000600)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000080), 0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000080)={r8, 0x5, 0x101}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0x2af) socket$inet6_sctp(0xa, 0x5, 0x84) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') r10 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000000)='./file0\x00', r10, &(0x7f00000001c0)='./file0\x00', 0x2) [ 279.684873][ T9803] netlink: 'syz-executor.5': attribute type 16 has an invalid length. 01:41:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0xc6000) syz_mount_image$vfat(&(0x7f00000004c0)='\x00\x01\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f00000005c0)={[{@uni_xlate='uni_xlate=1'}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}]}) 01:41:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3a92b15b7816a0ba}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, 0x0, 0x40000000) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000019e, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffef0}, 0xfffffffffffffe73) r3 = socket$kcm(0xa, 0x100000006, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)=r4, 0x4) r5 = socket$kcm(0x2, 0x1000000000000801, 0x84) sendmsg(r5, &(0x7f0000000440)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)='c', 0x1}], 0x1}, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, 0x0, 0xf4) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x80000001, 0x2000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'k\x8a\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\xf3', 0x2000}) 01:41:20 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffff000, 0x0, [{0x3f}, {}, {}, {}, {}, {}, {}, {0x0, 0xd0}, {0x5}, {0xd2}, {0xfe, 0x3, 0xff}, {}, {0x0, 0x2}, {0x0, 0xf9}, {}, {}, {}, {0x40, 0x0, 0x0, [], 0x2}, {0x0, 0x0, 0x4, [], 0xb5}, {0x0, 0x7f, 0x0, [], 0x1f}, {0x0, 0x0, 0x0, [], 0x6}]}}) 01:41:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001200)='SEG6\x00') r0 = dup(0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000001c0)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000440)=""/195, 0xc3}, 0x1ff}], 0x1, 0x40012000, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='h*+\x00') syz_open_procfs(0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100), &(0x7f0000000140)=0x10) syz_open_dev$admmidi(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) write(r4, &(0x7f0000000280)="8f0c0d07d876827f9f56a7876804f73803de9b105d4e43481bb43a931b835da3df8e41584731643e2ba5167a4fc2f8375d19c8ed4ce7a3eed464b63a0f5fd2421599c350a595758518ece163b786538bd7eabd79905b5fff254801096d16abd1597d8994630454d936143659d2b0b3e32ca04ee0", 0x74) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) [ 280.019030][ T9827] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 01:41:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000040), &(0x7f0000000280)=0x4) keyctl$get_persistent(0x16, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80, 0x8400) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000240)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) pidfd_send_signal(r5, 0x36, &(0x7f00000000c0)={0x8, 0x80, 0x9}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r3, r7, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, 0x0, &(0x7f000034f000)) 01:41:20 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="000400000000000043492b926355290010"], 0xff86) openat$cgroup_ro(r3, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000000f3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x580, 0x358, 0x0, 0x358, 0x498, 0x498, 0x498, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:inetd_child_exec_t:s0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1fffffffe, @mac=@remote, {[0x0, 0x101, 0x0, 0xff, 0x1fe]}, @empty, {[0xff, 0x0, 0xff, 0xff, 0x42f729269c6fb191, 0x1fe]}, 0x1ff, 0x1f, 0x8, 0x6, 0x8, 0x80, 'ip6erspan0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0x200}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @local, @broadcast, 0x2, 0xffffffff}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @mac=@random="aeba2ab51e0c", {[0x0, 0x1fe, 0x0, 0x0, 0x0, 0xff]}, @mac=@dev={[], 0x1e}, {[0x0, 0x7f, 0x0, 0xff, 0xff, 0xff]}, 0x4, 0x8, 0x100, 0x6, 0x1, 0x4b, 'ipddp0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x8}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @remote, 0xf, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x5d0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) 01:41:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x1, 0x81, 0x1ff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f00000001c0)=""/19, 0x13) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open(&(0x7f0000000200)='./file0\x00', 0xe0000, 0x8d) r5 = accept$ax25(r4, &(0x7f0000000040)={{}, [@bcast, @remote, @rose, @default, @null, @default, @default]}, &(0x7f0000000100)=0x48) getsockopt$sock_int(r5, 0x1, 0x2b, &(0x7f0000000140), &(0x7f0000000180)=0x4) 01:41:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) sendmmsg(r0, &(0x7f0000000180), 0xc0, 0x1400c402) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 01:41:21 executing program 4: r0 = gettid() socket$inet(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) readahead(r1, 0x20000000000, 0x9) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="009c6d94be54940d1230a88dd2c445f2034739d64d03e5bf59dd1b9aa5b31faca9e97ca66889ec109e6add3aa8a9b4ea1b6ac0c4e730d028b55f9cc26e970415b979585a6c90761009d10e98b2758f38f4ecd646f00ea387bbd52e6a9341a80990b55d9983b0740f5e63265edfff06d22a42f7fd52f3df6058338ea1a2cb2b388eeb14ff368329dcdb53fb02990357045b636e07eed082287935055115af67d7ba71f036a88fd0ba8610d26795fcea997ba315048c2a5b064bf09f0cae900b901c0802c34cc796d45a6d8a8cececabdc197685d6fb77b1eebbfc"], 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x400404) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getown(r3, 0x9) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 281.297947][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 281.297962][ T26] audit: type=1804 audit(1574214081.731:62): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir259173589/syzkaller.2RvGhj/16/file0" dev="sda1" ino=16561 res=1 [ 283.212854][ T9884] IPVS: ftp: loaded support on port[0] = 21 [ 283.361343][ T9884] chnl_net:caif_netlink_parms(): no params data found [ 283.395613][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.402844][ T9884] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.410888][ T9884] device bridge_slave_0 entered promiscuous mode [ 283.419787][ T9884] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.427038][ T9884] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.435155][ T9884] device bridge_slave_1 entered promiscuous mode [ 283.454148][ T9884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.466287][ T9884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.488701][ T9884] team0: Port device team_slave_0 added [ 283.497161][ T9884] team0: Port device team_slave_1 added [ 283.558546][ T9884] device hsr_slave_0 entered promiscuous mode [ 283.615773][ T9884] device hsr_slave_1 entered promiscuous mode [ 283.655161][ T9884] debugfs: Directory 'hsr0' with parent '/' already present! [ 283.751121][ T9884] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.758413][ T9884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.765793][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.772848][ T9884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.819567][ T9884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.836203][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.844339][ T2878] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.854229][ T2878] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.863241][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 283.877590][ T9884] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.891888][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.901396][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.908609][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.921927][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.930721][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.937857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.047209][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.056308][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.065278][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.073918][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.089879][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.100855][ T9884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.120682][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.128205][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.144534][ T9884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.339510][ T9894] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 284.494670][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.520831][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.609172][ T2552] device bridge_slave_1 left promiscuous mode [ 284.616264][ T2552] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.668595][ T2552] device bridge_slave_0 left promiscuous mode [ 284.676608][ T2552] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.915098][ T2552] device hsr_slave_0 left promiscuous mode [ 286.965028][ T2552] device hsr_slave_1 left promiscuous mode [ 287.019819][ T2552] team0 (unregistering): Port device team_slave_1 removed [ 287.037058][ T2552] team0 (unregistering): Port device team_slave_0 removed [ 287.051649][ T2552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.100017][ T2552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.224440][ T2552] bond0 (unregistering): Released all slaves 01:41:27 executing program 5: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@mcast2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000002c0), &(0x7f0000000240)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000002c0), 0x0}, 0x20) 01:41:27 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="000400000000000043492b926355290010"], 0xff86) openat$cgroup_ro(r3, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000000f3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x580, 0x358, 0x0, 0x358, 0x498, 0x498, 0x498, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:inetd_child_exec_t:s0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1fffffffe, @mac=@remote, {[0x0, 0x101, 0x0, 0xff, 0x1fe]}, @empty, {[0xff, 0x0, 0xff, 0xff, 0x42f729269c6fb191, 0x1fe]}, 0x1ff, 0x1f, 0x8, 0x6, 0x8, 0x80, 'ip6erspan0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0x200}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @local, @broadcast, 0x2, 0xffffffff}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @mac=@random="aeba2ab51e0c", {[0x0, 0x1fe, 0x0, 0x0, 0x0, 0xff]}, @mac=@dev={[], 0x1e}, {[0x0, 0x7f, 0x0, 0xff, 0xff, 0xff]}, 0x4, 0x8, 0x100, 0x6, 0x1, 0x4b, 'ipddp0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x8}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @remote, 0xf, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x5d0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) 01:41:27 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f6105000a9a000a1f0000070028080008001e0020000000", 0x24}], 0x1, 0x0, 0xfffffffffffffe5e}, 0x20000000) 01:41:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bind(r0, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) r3 = dup(0xffffffffffffffff) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xfffffff9, 0xd6}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000080)) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000018c0), 0x2, 0x140, 0x0) 01:41:27 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffefa, 0xfa00, {0x20000000000002, &(0x7f00000000c0), 0x2}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400, 0x80, 0x0, 0x0, 0x1, 0x7f}, 0x0, 0xf, r0, 0x0) socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) write$binfmt_elf64(r1, &(0x7f0000001640)={{0x7f, 0x45, 0x4c, 0x46, 0xde, 0x80, 0xff, 0x9, 0x66ea, 0x3, 0x3b, 0x2, 0x1bf, 0x40, 0x3c8, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x4, 0xd972}, [{0x474e550, 0x57c5, 0xa3c, 0x0, 0x5, 0x400, 0x2, 0x300}, {0xcf84d57433cbc5a7, 0x7fffffff, 0x0, 0x2b35, 0x1ff, 0x9, 0x7, 0x3}], "f1f4b68a88eb40d7e3066b57d7107997a04f96a0367f533c340cfd5d8a3882b255b49a2e726576215cecb8389c6c8775f10ab3dd54822885e5bded5ee1d045cd2a83bac84739ccc688816f5d533c9a6931a67179a4077545f437d38ca7", [[], []]}, 0x30d) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmsg$can_j1939(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/100, 0x64}, {&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000540)=""/230, 0xe6}], 0x4, &(0x7f0000000640)=""/4096, 0x1000}, 0x2) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() r3 = getpid() r4 = getpid() ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x6, 0x8, 0x81, 0x1, 0x0, 0x4d2d}) fcntl$getflags(0xffffffffffffffff, 0x3) rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) r5 = gettid() migrate_pages(r5, 0x101, &(0x7f0000000180)=0x8, &(0x7f0000001980)=0x81) ptrace(0x10, r3) ptrace$pokeuser(0x6, r4, 0x388, 0xb8) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, 0x0, 0x0, 0x0) fgetxattr(r6, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)=""/175, 0xaf) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x11000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r7 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000000)=@req3={0xbe0, 0x0, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f00000019c0)={0x39ec125cdbce878d, @local, 0x4e20, 0x2, 'lblc\x00', 0x9, 0x8e45, 0x30}, 0x2c) 01:41:27 executing program 4: setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x401, @ipv4={[], [], @empty}, 0x8}}, 0x0, 0x3}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(0xffffffffffffffff, 0x1d7) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r5, 0x5, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000fddbdf25010000000000a87b778b3200c76d3e47e3450000014100000018001700000017000000006574683a73797a5f74756e00"], 0x34}, 0x1, 0x0, 0x0, 0x4002}, 0x80) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000080)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r10}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r10, @in6={{0xa, 0x4e21, 0x3f, @loopback, 0x28}}, 0x40, 0x486}, &(0x7f00000003c0)=0x90) [ 287.380583][ T9894] netlink: 'syz-executor.5': attribute type 16 has an invalid length. 01:41:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) 01:41:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x0, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x9, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000480)={0x2, 0xa, 0x7fff, 0x3}, &(0x7f00000004c0)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x8}}, 0x182) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r6, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000880)='/dev/net/tun\x00\x91\x87\xf5\xc3\xa0\"\xa7U\xca\xbbq`\xf5\xa7`\xf5\x92\xfe\\$\xc6\x8a\xe2Y\x05\xebD\x0fiaD\xff/\x17\x93\vL{u\x05\x004\xf2\xa7\xfc\xaf\x0e8\xc7\xe1%xMc\xb2\x9e\xca\xc3\x1c\x9c9\xcc.^', r5}, 0x30) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1ff5583879f9312f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, r6, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup(r9, &(0x7f0000000240)='0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'all\x00\x19\x00\x00!C\x19\xb2d\xb4\xa0\xb4v', 0x420000015001}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') 01:41:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="a80000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000080002b0074000100"/80, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="080000000000000000000000000000001000000000000000000000000000000000000000080003000800800008001b000000000071fefe4b6960d07bfa74588fed1701a13950eb3da3c6408a621067a8694ea3022e624b13e381f1d632db2281a9c258a6d1759db9ef1d9b39be8366f289c9ac56a30dd3929f5d64496ea94aa7f3c5e6c2ab47f33eb4651ae2da71913f8bb1d54750ca45a4851c6489868a2e6b885b1f72772ff1ce72fc1e1037cd9f457773784b1491e887f8f97cceee6e3c0981"], 0xa8}}, 0x0) 01:41:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x10004000000002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) 01:41:28 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) unlinkat(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x50b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x80000001) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) unlinkat(r1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x477, 0x0) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0xfffffefb, 0x0}}, {{0x0, 0x269, 0x0}}], 0x2a7, 0x0, 0x0) [ 287.744171][ T9921] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:41:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000300)={0x7b, 0x5, [0xc0010015], [0xc1]}) [ 287.786762][ T9921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 01:41:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) recvmmsg(r0, &(0x7f0000003180)=[{{&(0x7f0000000140)=@l2, 0x80, 0x0}, 0x40}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000380)}, {&(0x7f0000001dc0)=""/139, 0x8b}, {0x0}, {&(0x7f0000001f80)=""/54, 0x36}, {&(0x7f0000002000)=""/242, 0xf2}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x6, &(0x7f0000000440)=""/2, 0x2}, 0x2}], 0x2, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) fstat(r1, &(0x7f0000000080)) r2 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x12, {0xa, 0x4e20, 0x9, @mcast1, 0x20}}, 0x24) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 287.925641][ T9936] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:41:28 executing program 0: r0 = socket$kcm(0xa, 0x122000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x1200000000000000, 0x0, 0x700000a, 0x80fe}, 0x80, 0x0}, 0x0) 01:41:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) 01:41:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x2000000000000001, 0xd2) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0x8000000000f087}, 0x14) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0815b5055e0bcfe87b3071") setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f0000000280)='\x00', 0xdb4, 0x0, 0x0, 0x5f0) [ 288.020394][ T9936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 01:41:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") syz_mount_image$exfat(&(0x7f0000000100)='exfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000001540)={[{@fmask={'fmask'}}, {@errors_remount='errors=remount-ro'}], [{@uid_lt={'uid<'}}]}) 01:41:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RWRITE(r2, 0x0, 0xfff2) 01:41:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x108) 01:41:28 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipvP/vs/drop_packet\x00', 0x2, 0x0) 01:41:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x1c) [ 288.361901][ T9956] [EXFAT] Unrecognized mount option uid<00000000000000000000 or missing value 01:41:28 executing program 0: r0 = socket(0x10, 0x2, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x2d0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001900fdff0085ed3c90aee34307e600000800030006090000a0fbe900020a1e0fde01919ce30792ea0000c689d6497ffe46724a5702ba16c8"], 0x28}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924929c8, 0x0) 01:41:28 executing program 5: userfaultfd(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0xd33057e26580622, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d8", 0xe) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x1000000, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)="694912a063c54a46a31d337cb35036674cf03abe9b710988f1067b45", 0x1c}]) r4 = socket$unix(0x1, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, r4) socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0xa}}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r3, 0x0, 0x0) [ 288.502939][ T9974] [EXFAT] Unrecognized mount option uid<00000000000000000000 or missing value 01:41:29 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) 01:41:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) recvmmsg(r0, &(0x7f0000003180)=[{{&(0x7f0000000140)=@l2, 0x80, 0x0}, 0x40}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000380)}, {&(0x7f0000001dc0)=""/139, 0x8b}, {0x0}, {&(0x7f0000001f80)=""/54, 0x36}, {&(0x7f0000002000)=""/242, 0xf2}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x6, &(0x7f0000000440)=""/2, 0x2}, 0x2}], 0x2, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) fstat(r1, &(0x7f0000000080)) r2 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x12, {0xa, 0x4e20, 0x9, @mcast1, 0x20}}, 0x24) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:41:29 executing program 3: r0 = creat(&(0x7f0000001340)='./file0\x00', 0x0) r1 = dup(r0) pwritev(r1, 0x0, 0x0, 0x0) 01:41:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 01:41:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:41:29 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r1 = syz_open_dev$mouse(0x0, 0x0, 0x202082) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000001) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0) accept(r2, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x477, 0x0) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0xfffffefb, 0x0}}, {{0x0, 0x269, 0x0}}], 0x2a7, 0x0, 0x0) [ 289.013173][T10005] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 01:41:30 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file1\x00') read(r0, &(0x7f0000000280)=""/11, 0x194) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) clone(0x3102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, 0x0) 01:41:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000300)={0x7b, 0x5, [0x4b564d05, 0x5], [0xc1]}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 01:41:30 executing program 1: socket$vsock_dgram(0x28, 0x2, 0x0) syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000180)) write(r1, &(0x7f0000000340), 0x41395527) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/\b\x00\x00\x00\xab%pue\xf0s\xdc\xc5\x1c', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:41:30 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x477, 0x0) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0xfffffefb, 0x0}}, {{0x0, 0x269, 0x0}}], 0x2a7, 0x0, 0x0) 01:41:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) 01:41:30 executing program 5: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x10, 0x6, 0x0) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:41:30 executing program 0: socket$inet(0x10, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x8f37692296}, 0x0) 01:41:30 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:41:30 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchmod(r0, 0x21) 01:41:30 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x1000000, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_submit(0x0, 0x0, 0x0) 01:41:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 01:41:31 executing program 1: r0 = open(0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="ff55142cce22ebcb4cd0b2a035c74070c03fb6e3ede54d0e70d6441e6280cd71f5dce1e469020c082e23d965cb359e4defc49893c111a1000000000000000000000000000000eddb68a719caad022b50ae635cc0058fc35939699b263cf8a1c36974433a336008e2382958e8cad5cd13556d9927c6827d8e3ba8b9da6276e12cfb3ad3757e87e86ac905871ce3eeae1dd869367131d24f9ff65253f72b3396274cf0bc2db17e1a5e71d1ee"], 0x1) gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 01:41:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 01:41:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x1c) 01:41:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 01:41:31 executing program 5: mknod(&(0x7f00000000c0)='./bus\x00', 0x8050, 0x40004800) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 01:41:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000c0004000300", 0x24}], 0x1}, 0x0) 01:41:31 executing program 5: creat(&(0x7f0000001340)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10, 0x100) [ 291.077077][ T26] audit: type=1804 audit(1574214091.511:63): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445991641/syzkaller.XyYoQt/10/file0" dev="sda1" ino=16641 res=1 01:41:31 executing program 0: socket$inet(0x10, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x8f37692296}, 0x0) 01:41:31 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:41:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) close(r0) syz_open_dev$radio(0x0, 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) [ 296.355474][ T2552] device bridge_slave_1 left promiscuous mode [ 296.361999][ T2552] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.425777][ T2552] device bridge_slave_0 left promiscuous mode [ 296.432124][ T2552] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.515834][ T2552] device hsr_slave_0 left promiscuous mode [ 296.585149][ T2552] device hsr_slave_1 left promiscuous mode [ 296.636857][ T2552] team0 (unregistering): Port device team_slave_1 removed [ 296.651055][ T2552] team0 (unregistering): Port device team_slave_0 removed [ 296.663753][ T2552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.740094][ T2552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.903464][ T2552] bond0 (unregistering): Released all slaves 01:41:44 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x1000000, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_submit(0x0, 0x0, 0x0) 01:41:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x200000000000011, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 01:41:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="8c2fb074d782b99a4ebb28bd49ca9d8f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8f45aa7708f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d92b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefd6c32891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d06cfb51b0f47e5f4404000000", 0xc9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/62, 0x3e}], 0x1, 0x0, 0x6}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/28, 0xfd98}, {&(0x7f0000000a80)=""/101, 0x65}], 0x2}}], 0x2, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x1c) 01:41:44 executing program 1: userfaultfd(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0xd33057e26580622, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x1000000, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)="694912a063c54a46a31d337cb35036674cf03abe9b710988f1067b45", 0x1c}]) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$unix(0x1, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, r4) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0xa}}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r3, 0x0, 0x0) 01:41:44 executing program 0: socket$inet(0x10, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x8f37692296}, 0x0) 01:41:44 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:41:44 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000000040)) 01:41:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000210000009078ac141400ac1423bb0702901900000200000004000000000000000000"], 0x0) 01:41:44 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0) accept(r1, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f00000001c0)=0x80) sendmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x477, 0x0) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0xfffffefb, 0x0}}, {{0x0, 0x269, 0x0}}], 0x2a7, 0x0, 0x0) 01:41:44 executing program 1: userfaultfd(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0xd33057e26580622, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x1000000, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)="694912a063c54a46a31d337cb35036674cf03abe9b710988f1067b45", 0x1c}]) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$unix(0x1, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, r4) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0xa}}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r3, 0x0, 0x0) 01:41:44 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x1000000, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_submit(0x0, 0x0, 0x0) 01:41:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r2, 0x1) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x134) 01:41:44 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:41:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720034fac41f1de628e2a3166ec21e03c68a60708328e1606a83211bc78be79097861ce52747ac474593d76f9ec5cdd91725cb16e62b4bb027fbb96eab344de0401076c6345a7d32e9fe9ba1e68ac07081a7d1e0ed1eb9e96b41214af554f1831dfd8bd2b466789f4295317d17c138abe5fa9044a44792e9aecfb3f9130ff673786a8ef2b14c4999c29a5713c2fb5e35f2fae0d58b64355a697efd45e36528e57c68a62c6edc7879962e05419c7c5fa64ec92e670821df50d0f3a7312d2120f363954e72ba0322fc4318f819b1e2b1a17fb939a5db9c1a0a83b44abcffc3dd555d4dd30c0a4bd524c29d4d57bc906c012446c99a882162f3f72cce0702d7394288807fe2a308e01adc9bbf2a9cd78fabaa3c10640777e0813726a70df3323924035b235fd39ae4ab08d3f09bd231b38dca4389b098b0d3538dd3ef5bf068c1df8fbe00b0b2aa9ec3de5d3fba56594328a643c2799b8371adc6ecdfd9b9c4e52102eaa83b57da14645e442b4b7ad5f555d872dc50c330d145ca853b768b990dbaa18ab7f7e2e2d695e980f96d646e8c893ad912bc71237e9aa3ef2d8a40b5629ca02a82556bd433a7222dc3257fd6ace72b00b6f8c9d621c54f777ee5fd1fc59d11a7ea96855d58bb21d40d1bbdfecad8ed15a25062f7692e1879793657f91b6", 0x2a4, 0x0, 0x0, 0x0) r1 = socket(0x0, 0x80000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), 0x0, &(0x7f0000000300)=0x0) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) getgroups(0x4, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) chown(&(0x7f0000000080)='./file0\x00', r3, r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), 0x0, 0x0) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) getgid() chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x18) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000600)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/video35\x00', 0x2, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), 0x0, &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r9 = getgid() fsetxattr$system_posix_acl(r7, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES32=r8, @ANYBLOB="820002", @ANYRES32, @ANYBLOB="040003000000000008", @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="6f248b87", @ANYRES32=r9, @ANYBLOB="10000100000000002000070000000000"], 0xd, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000004600)='/dev/input/event#\x00', 0x1, 0x200) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000005ac0)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000005b00)) stat(0x0, &(0x7f0000000740)) setregid(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x18) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 01:41:44 executing program 1: userfaultfd(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0xd33057e26580622, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x1000000, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)="694912a063c54a46a31d337cb35036674cf03abe9b710988f1067b45", 0x1c}]) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$unix(0x1, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, r4) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0xa}}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r3, 0x0, 0x0) 01:41:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r2, 0x1) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x134) [ 306.101264][T10195] IPVS: ftp: loaded support on port[0] = 21 [ 306.170933][T10195] chnl_net:caif_netlink_parms(): no params data found [ 306.202041][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.209318][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.217823][T10195] device bridge_slave_0 entered promiscuous mode [ 306.226418][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.233538][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.241580][T10195] device bridge_slave_1 entered promiscuous mode [ 306.261105][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.272532][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.295503][T10195] team0: Port device team_slave_0 added [ 306.303506][T10195] team0: Port device team_slave_1 added [ 306.358710][T10195] device hsr_slave_0 entered promiscuous mode [ 306.418911][T10195] device hsr_slave_1 entered promiscuous mode [ 306.487524][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.494948][T10195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.502296][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.509422][T10195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.552124][T10195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.568350][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.578660][ T2878] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.587143][ T2878] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.597167][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 306.610675][T10195] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.623904][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.632868][ T9210] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.639975][ T9210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.669033][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.678216][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.685348][ T9197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.693472][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.703414][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.713652][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.728053][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.736713][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.749020][T10195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.765896][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.773356][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.786546][T10195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.980081][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 306.987033][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 307.095050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 307.101221][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 307.214855][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 307.220741][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:41:48 executing program 0: socket$inet(0x10, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x8f37692296}, 0x0) 01:41:48 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fmask=00000000000000000000000,fmask=01777777777777777777776,mft_zone_multiplier=0x0000000000000000,case_sensitive=yes,nls=iso8859-13,umask=00000000000000000000000,uid']) 01:41:48 executing program 1: userfaultfd(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0xd33057e26580622, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x1000000, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)="694912a063c54a46a31d337cb35036674cf03abe9b710988f1067b45", 0x1c}]) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$unix(0x1, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, r4) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0xa}}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r3, 0x0, 0x0) 01:41:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r2, 0x1) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x134) 01:41:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) fcntl$lock(r2, 0x26, &(0x7f0000000040)) 01:41:48 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r0) [ 307.922742][T10208] ntfs: (device loop5): parse_options(): The uid option requires an argument. 01:41:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r2, 0x1) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x134) 01:41:48 executing program 3: personality(0x1bb2baf3005ac137) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) [ 308.025752][T10208] ntfs: (device loop5): parse_options(): The uid option requires an argument. 01:41:48 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x3}}) 01:41:48 executing program 5: creat(&(0x7f00000001c0)='./bus\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='virtiofs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) write$P9_RWALK(r1, &(0x7f0000000040)=ANY=[], 0x0) 01:41:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000001c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000001e2302000000"}, 0x38) [ 308.330106][T10239] virtio-fs: tag <(null)> not found [ 308.359616][T10240] SELinux: failed to load policy 01:41:48 executing program 3: gettid() tkill(0xffffffffffffffff, 0x33) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/softnet_stat\x00') r2 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x7ff, 0x800) write$P9_ROPEN(r2, &(0x7f0000000700)={0x18, 0x71, 0x1, {{0x4, 0x4}, 0x5d}}, 0x18) write$FUSE_STATFS(r1, &(0x7f0000000400)={0x60, 0x0, 0x5, {{0x2, 0x5, 0x5ee1ddab, 0x9, 0x10000, 0x7, 0x8001, 0x9}}}, 0x60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x80, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f0000000180)='./file0\x00', 0x1f, 0x4, &(0x7f0000000680)=[{&(0x7f0000000240)="5132313e265ae915e0ce9ed5de9afa9e9799fcab7aeb5713bc9ef6fa021cd18472e1674209b0bda5b8ee81c86256c6ebe51a9ae5170e905e1f4ab59dd966220df5589b8563dda08555b8f098fd36222657", 0x51, 0x1}, {&(0x7f0000000340)="e64ad3cb9fcb02a5a586f9eaf470620ba455f59f7d1f9789aad311f528a7b6965306bbb15abcd4c226347a8fbef4f14516bb535f150740f61ae299a5e3823914425437775270e1f701e5eedd63f8e90fc52f439d3f2c2f4729a05f0ca65029e999a81eefcf6a36f59484a58c142a2ce9cf29c6225da1770c42", 0x79, 0x3}, {&(0x7f0000000580)="72ddb347d3e29005352f04690292389f2e6b07875182e5fb9b368da4affa9c387dcc128c05ab1cc5bbfef16b8250ec41ac0e7de9fdf6068952a3f8bdf57799f64eca5bff4e7de32d495a6a2b1afa68aa575429899733b15f3354a40728ee94f70b21cccd46e8c6d511e81f57c85101589977237dd6c7c8cec32818bd061a6c24d82d3725906df4fa01aae981e6cc9302cd1777ef3c8721e897c1e94cc49bebe1d6e71e55313294f213a27da8b9e1aee9190c7eb750d0c6f4f0e28c7bec32c59444bc93938ba333697652f4ecc53eb2063133cd67a8599550fc5405364d2a61ffccdd2d", 0xe3, 0x8}, {&(0x7f00000001c0)="f5402dbe59b7ca436832ca5582b42cb64074eac034a240908ad3b58b43c99a4803db3f7a5ebde9e31126387ae7171d", 0x2f, 0x6}], 0x1000000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x31e) socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="dfc390f84ec24b2f4dacbecffdb812801633bd961ecd3b3e0b91ed69edaae43aaa9227a1542553ba325e43d9830a4c5a15c82016a8478719fa9f7e477f9ace0ac6b45dab370e58da485e02d839b69cb45b1e2e59fb38edd4376308ca9bd14d98a22600e1ad4228299760d897108a20de642a44a70a99063c5fc606abcb652649e29c978d0f6c8ffcf71fb961e4441f074c9a7b822c811d80fe97c42c2c7bb285ecd4c1845b004e330503a1eff10ccbb731351edd9cdb484044d59ed1a39dda17c25687e0a47be53611", 0xc9, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) [ 308.605761][T10246] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 308.814789][T10246] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 308.866487][T10239] virtio-fs: tag <(null)> not found 01:41:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x985) r1 = dup(r0) lsetxattr$security_smack_entry(&(0x7f0000000200)='./file1\x00', &(0x7f0000000340)='security.SMACK64MMA\xefz/?\xb3h\x1b\xe5\xca\x9e\xb5\xa9\xdbW\x94\xc8L\xfe+\xe8M\xfe*\x88uB\x1e\"AZfS&\x14\xfa\xa7\xdaE\x03\a\xe8\xa5a\xc3[\xc2\xd3\x9dE\xec\xb0f\x9e\xced\x8dT\x15\xe1\x83\xeex\xe4', &(0x7f0000000280)='minix\x00', 0x6, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="600b42e006000a0090040300001af5c97f13", 0x12, 0x400}], 0x0, 0x0) flistxattr(r1, &(0x7f0000000140)=""/160, 0xa0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x61e40) 01:41:49 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r0) 01:41:49 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x14, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='\r\f\a\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x17) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) splice(r1, &(0x7f0000000180)=0x9, r2, &(0x7f00000001c0)=0x5, 0x800, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) 01:41:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x80005, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000400)={'broute\x00', 0x0, 0x0, 0xd6, [], 0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000300)=""/214}, &(0x7f0000000000)=0x78) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000240)={'team0\x00\x030\xff\xfd\x00%`\xc3\xff\xff', 0xb5}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@remote, r4}, 0x14) 01:41:49 executing program 5: openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x24000, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f0000000380)={@null, @null, 0x2, 0x56}) shutdown(r2, 0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="cc47a421bd1520995c75c0066cdada473080ba9cb5b35b5cab5b9df1a4d0e479d5ca55a69e4a1bb8e0240eeb65a926c32ebf1d61e4d0433a6ef1c14617deaab6d9a245d4010c246e140f581693083ef9c16bada0e5a0d88e997f35d4b8682157b48cb7c439d5fc94e9aa824c84c8065788c7e342dcd956141a80773d7d617f30a5b3b0a76ff66f1442b796"], 0xfdef) 01:41:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000421, 0x1) write(r0, &(0x7f0000000340)='/', 0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) sendfile(0xffffffffffffffff, r2, &(0x7f0000001000)=0x6, 0x5) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x8000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r5, r4}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5, 0xff}}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x2000000000011, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x80000001, 0x0) r9 = syz_open_pts(r7, 0x602000) ioctl$TCFLSH(r9, 0x540b, 0xfffffffffffffff9) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x185404, 0x0) [ 309.220404][T10279] MINIX-fs: mounting unchecked file system, running fsck is recommended 01:41:49 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000900)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/44], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/67], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/198], @ANYBLOB="c60010000000009ac38ea56f7974ae2401ace2b8", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/15], @ANYBLOB="0f00000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/54], @ANYBLOB='6\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/42], @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/77], @ANYBLOB='M\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00'/244], @ANYBLOB="f400000000000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/219], @ANYBLOB="db00000000000000"], @ANYBLOB='\t\x00'/24], 0x48}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) [ 309.306104][T10279] minix_free_inode: bit 1 already cleared 01:41:50 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r0) [ 309.938911][ T12] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) 01:41:50 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x440441, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) socket$kcm(0x10, 0x0, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001900)='pids.events\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001940)={'vcan0\x00'}) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1000000000000000, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000040)='&@[\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000680)='&@[\x00') 01:41:50 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/if_inet6\x00') ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000180)={{0x2, @name="a5411d4b98119aa1d15a66f88818531cc3cef1c997457317a6d8450052038201"}, 0x8, 0x6, 0x4}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) prctl$PR_MCE_KILL_GET(0x22) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000001c0)=""/142) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000002440)=""/4100, 0x2f3ecd}], 0x0, 0x0) 01:41:50 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000140)) semctl$IPC_RMID(r5, 0x0, 0x0) semctl$GETVAL(r5, 0x1, 0xc, &(0x7f00000001c0)=""/252) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_delrule={0x28, 0x21, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8000000}]}, 0x28}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000100)=""/99) bind(r0, &(0x7f0000000040)=@can, 0x80) 01:41:50 executing program 5: syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)={[{@grpquota='grpquota'}]}) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bind$netrom(r0, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 01:41:51 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:41:51 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) dup2(r0, 0xffffffffffffffff) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fd) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec6}}], 0x4000000000003be, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000240)=0xb2, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 01:41:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{}, [@default, @null, @netrom, @bcast, @default, @null, @default]}, &(0x7f0000000180)=0x48) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003180)=@can, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003cc0)=""/243, 0xf3}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000003e40)=""/16, 0x10}, {&(0x7f0000003e80)=""/223, 0xdf}, {&(0x7f0000003f80)=""/195, 0xc3}, {&(0x7f0000004080)=""/19, 0x13}], 0x4, &(0x7f0000004100)=""/207, 0xcf}, 0xbff}], 0x4, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') 01:41:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netstat\x00') r1 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) sendfile(r1, r0, 0x0, 0x8001) [ 311.403372][T10321] selinux_nlmsg_perm: 5 callbacks suppressed [ 311.403389][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10321 comm=syz-executor.1 [ 311.481406][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10321 comm=syz-executor.1 01:41:52 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 311.543334][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10321 comm=syz-executor.1 [ 311.616841][ T2878] libceph: mon1 (1)[::6]:6789 socket error on write [ 311.623820][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10321 comm=syz-executor.1 [ 311.662309][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10321 comm=syz-executor.1 [ 311.685210][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10321 comm=syz-executor.1 [ 311.709058][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10321 comm=syz-executor.1 [ 311.734326][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10321 comm=syz-executor.1 [ 311.759040][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10321 comm=syz-executor.1 [ 311.779371][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10321 comm=syz-executor.1 [ 312.659080][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 312.665217][ T2878] libceph: mon0 (1)[d::]:6789 connect error [ 312.796180][T10372] IPVS: ftp: loaded support on port[0] = 21 [ 312.887540][T10372] chnl_net:caif_netlink_parms(): no params data found [ 312.921274][T10372] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.928559][T10372] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.936537][T10372] device bridge_slave_0 entered promiscuous mode [ 312.944635][T10372] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.951883][T10372] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.960202][T10372] device bridge_slave_1 entered promiscuous mode [ 313.052239][T10372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.066393][T10372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.092510][T10372] team0: Port device team_slave_0 added [ 313.100276][T10372] team0: Port device team_slave_1 added [ 313.150459][T10372] device hsr_slave_0 entered promiscuous mode [ 313.215518][T10372] device hsr_slave_1 entered promiscuous mode [ 313.255056][T10372] debugfs: Directory 'hsr0' with parent '/' already present! [ 313.346128][T10372] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.353319][T10372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.360912][T10372] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.368051][T10372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.412932][T10372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.429574][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.439079][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.447830][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.457569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 313.473768][T10372] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.487726][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.497102][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.504260][ T9197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.526179][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.536458][ T9210] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.543525][ T9210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.615289][ T9195] libceph: connect (1)[d::]:6789 error -101 [ 313.621400][ T9195] libceph: mon0 (1)[d::]:6789 connect error [ 313.638049][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.647177][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.661739][ T9210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.673996][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.689236][T10372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.700995][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.710749][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.734646][T10372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.742857][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.751814][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.815630][ T36] device bridge_slave_1 left promiscuous mode [ 313.821848][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.847106][ T36] device bridge_slave_0 left promiscuous mode [ 313.853413][ T36] bridge0: port 1(bridge_slave_0) entered disabled state 01:41:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000421, 0x1) write(r0, &(0x7f0000000340)='/', 0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) sendfile(0xffffffffffffffff, r2, &(0x7f0000001000)=0x6, 0x5) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x8000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r5, r4}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5, 0xff}}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x2000000000011, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x80000001, 0x0) r9 = syz_open_pts(r7, 0x602000) ioctl$TCFLSH(r9, 0x540b, 0xfffffffffffffff9) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x185404, 0x0) 01:41:54 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3fffff1, 0x11, r0, 0xffffc000) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)) 01:41:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x1, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x3, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x1}, {0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x40) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1044142, 0x0) r4 = accept4$bt_l2cap(r2, 0x0, 0x0, 0x1c1800) sendmsg$sock(r4, &(0x7f0000000c40)={&(0x7f0000000740)=@sco={0x1f, {0x2, 0x3, 0x5, 0x6, 0x1, 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}, 0x4000840) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r5, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) 01:41:54 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x1) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x6) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300)) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xe200, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='vfat\x00') writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000000)={0x40, 0x20, 0x1, 0x8, 0x3f}) 01:41:54 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) sendmsg$nl_route(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000000800000000000000000000000092ca3abca36dbb370cfda99118fdb705306af4e4c82eb1", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 01:41:54 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 314.060737][ T26] audit: type=1400 audit(1574214114.491:64): avc: denied { map } for pid=10387 comm="syz-executor.1" path="socket:[35490]" dev="sockfs" ino=35490 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 [ 314.213815][ T26] audit: type=1800 audit(1574214114.641:66): pid=10396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16714 res=0 01:41:54 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, 0x1, 0x100, 0x0, 0x100000000100, 0xa}, 0xf185d539f9cd4262) perf_event_open(&(0x7f000001d000)={0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x0, 0x1000, 0xeadcfbc0b7b7f72e, 0x1, 0x3ff, 0xffffb6d4, 0x7fffffff, 0xa59, 0x1, 0x8000, 0x80, 0x0, 0x400, 0xfff, 0x4, 0x10}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8b1a, &(0x7f0000000040)='wlan0\x00') [ 314.326223][ T26] audit: type=1804 audit(1574214114.641:67): pid=10396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir116150123/syzkaller.zDyfxz/36/file0/file0" dev="sda1" ino=16714 res=1 01:41:54 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a5ff030000000000ffffff81000800000000000000000000e1000000887700720030b5fb42e811009658e25958cb3025dac42000000000", 0x39, 0x1c0}]) [ 314.437079][ T26] audit: type=1800 audit(1574214114.641:68): pid=10396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16714 res=0 01:41:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000421, 0x1) write(r0, &(0x7f0000000340)='/', 0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) sendfile(0xffffffffffffffff, r2, &(0x7f0000001000)=0x6, 0x5) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x8000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r5, r4}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5, 0xff}}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x2000000000011, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x80000001, 0x0) r9 = syz_open_pts(r7, 0x602000) ioctl$TCFLSH(r9, 0x540b, 0xfffffffffffffff9) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x185404, 0x0) 01:41:55 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x68042, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pwrite64(r1, &(0x7f0000000240)="04f4db86477b4d0fdc2ee2fb485606da8e54be09edc5bd2a62e45920e2c5f966bbe769f49f4b0570499aa34a8a5aa49ce137dbe9ac77de17ccbc06199d934ff02ceb38aab74a00b720f38e61990729915a771d85320f81c3a7508e252276547661bc0bb55d7cf78496ad953f5876ea76ba32128d178fbe3493fd3355c863423af49cb982e889525aef7e4467e86fab75445c9452bc5e0b99c2fbf92a8cab8d6a70ae1f3af8e543c6a16cd7a60f61b5ee21d6a78bbd59bd399b46324183d84e92481d2abf1f77c41d91c2200116b93bb1fd82f0a0ec1a2e", 0xd7, 0x5) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000140)) write$P9_RSTATu(r1, &(0x7f0000001300)=ANY=[@ANYPTR64], 0x8) fallocate(r1, 0x0, 0xffff, 0x9) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0x9ffc, 0x8003) fallocate(r0, 0x3, 0x5e89, 0xfff9) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x9870, 0x100) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000200)={0x1, 0x1, [0x34, 0xff, 0x8001, 0x0, 0x74ad8194, 0x8, 0x4]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) [ 314.601603][ T26] audit: type=1800 audit(1574214114.641:65): pid=10394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16713 res=0 [ 314.632277][ T26] audit: type=1800 audit(1574214114.701:69): pid=10408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16713 res=0 [ 314.655549][ T9194] libceph: connect (1)[d::]:6789 error -101 [ 314.655646][ T9194] libceph: mon0 (1)[d::]:6789 connect error [ 314.668082][T10421] Dev loop5: unable to read RDB block 1 [ 314.694171][T10421] loop5: unable to read partition table [ 314.726859][T10421] loop5: partition table beyond EOD, truncated 01:41:55 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 314.775130][T10421] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 314.889096][T10421] Dev loop5: unable to read RDB block 1 [ 314.917861][T10421] loop5: unable to read partition table [ 314.957905][T10421] loop5: partition table beyond EOD, truncated [ 314.985960][T10421] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 01:41:55 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x80000, 0x0) waitid(0x0, 0x0, &(0x7f0000000200), 0x8, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) accept4$inet6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c, 0x40c00) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x8004510b, &(0x7f0000000200)) sendmsg$nl_route(r4, 0x0, 0x1014) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x10003, 0x80011, r2, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x10004, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000001c0)={0x980000, 0x0, 0x8, [], &(0x7f0000000100)={0x990af7, 0x1f, [], @p_u16=&(0x7f00000000c0)}}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00') r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5caad999, 0x0, 0x0, 0x362) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) 01:41:55 executing program 5: r0 = socket$inet6(0xa, 0x80000, 0x0) close(r0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000010906, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r3, 0x200006) r4 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) ioctl$FICLONE(r1, 0x40049409, r5) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000040)={{0x0, 0x0, @reserved="e27fadb9d7b96dc9c0ae28faee11ef42521b83a09116716244a63ff4baa78541"}}) sendfile(r0, r3, 0x0, 0x8000fffffffc) [ 316.092010][ T26] audit: type=1800 audit(1574214116.521:70): pid=10469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16714 res=0 [ 316.662893][ T9194] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 318.105376][ T36] device hsr_slave_0 left promiscuous mode [ 318.177997][ T36] device hsr_slave_1 left promiscuous mode [ 318.241591][ T36] team0 (unregistering): Port device team_slave_1 removed [ 318.274714][ T36] team0 (unregistering): Port device team_slave_0 removed [ 318.299380][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.412029][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.643276][ T36] bond0 (unregistering): Released all slaves [ 318.655411][ T9194] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 318.663703][ T9194] libceph: connect (1)[d::]:6789 error -101 [ 318.669951][ T9194] libceph: mon0 (1)[d::]:6789 connect error 01:41:59 executing program 1: r0 = socket$inet(0x2, 0x1, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000040)={0x6, 0x3, 'client0\x00', 0x8000000040000001, "540a4c7704b2f495", "78faf1048fb656252c1277b2148bb2a3fb562b3a0e7b6f5834bb2f8714fa52f7", 0x6e2, 0x200}) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) 01:41:59 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 01:41:59 executing program 0: io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) io_submit(r0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x3000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setsig(r3, 0xa, 0x8) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) 01:41:59 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c208000000000000000100000000676800000000000000000000007fffff"}, 0xc) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) 01:41:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x2}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="0200eeffffff01000000ff07000000000000000000000000000000000000000000004200000000f60000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x212100, 0x0) ioctl$KVM_NMI(r2, 0xae9a) 01:41:59 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid_for_children\x00') mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2010, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e1d}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@fowner_eq={'fowner'}}]}}) [ 318.916669][T10475] SELinux: truncated policydb string identifier [ 318.944348][T10475] SELinux: failed to load policy 01:41:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) getpid() r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000140)=0x54) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 01:41:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x311, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0xfffffffffffffdf9, 0x2, @VETH_INFO_PEER={0xffffff96}}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0x3]}]}, 0x54}}, 0x0) [ 319.184211][T10496] ldm_validate_privheads(): Disk read failed. [ 319.223696][T10496] Dev loop2: unable to read RDB block 1 [ 319.243148][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 319.249670][T10496] loop2: unable to read partition table 01:41:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x80000b, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/148, 0x20000254) socket(0x1, 0x2, 0x1) [ 319.284513][T10496] loop2: partition table beyond EOD, truncated [ 319.311159][T10496] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 319.478039][T10498] ldm_validate_privheads(): Disk read failed. [ 319.511101][T10498] Dev loop2: unable to read RDB block 1 01:42:00 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect={0x1}) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r7 = creat(0x0, 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) writev(r7, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r7, 0x0, 0x3) write$USERIO_CMD_REGISTER(r7, &(0x7f0000000080)={0x0, 0xff}, 0x2) lseek(r6, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="01d10a4ae175ebab3c0991d329396866268b1847d9ec7a15c92149ef8e802eef8cb1d310a2b323312bcd9b08c07f125e6f02b99fe4a7fb8fad1d9256e06e2c5332a7a477df6e36404874a4400d7186499ccc38a1770c1a7c54a3bed0f9e7"], 0x1) fallocate(r6, 0x3, 0x0, 0x8020003) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r6, 0x0, 0x3) 01:42:00 executing program 5: gettid() r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000040)=0x3ff, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000000c0)=0x7fff) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001700)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000000540)=""/83, 0x53}, {&(0x7f0000001600)=""/22, 0x16}, {&(0x7f0000001640)=""/167, 0xa7}], 0x10000000000001e5, 0x400000000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="a0696c65300a"], 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000000140)={0x4, 0x9}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept(r0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 01:42:00 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 319.536422][T10498] loop2: unable to read partition table [ 319.552797][T10498] loop2: partition table beyond EOD, truncated [ 319.564194][T10498] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 319.617001][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 319.623986][ T2878] libceph: mon0 (1)[d::]:6789 connect error [ 319.798251][T10533] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:42:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}]}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c208000000000000001eae2c08f5193a43490010"], 0xff86) write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) sendto$inet(r0, 0x0, 0xfffffffffffffea9, 0x200007fd, &(0x7f0000e68000), 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r0, r3, 0x0, 0x80000003) 01:42:00 executing program 0: io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) io_submit(r0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x3000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setsig(r3, 0xa, 0x8) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) 01:42:00 executing program 5: gettid() r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000040)=0x3ff, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000000c0)=0x7fff) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001700)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000000540)=""/83, 0x53}, {&(0x7f0000001600)=""/22, 0x16}, {&(0x7f0000001640)=""/167, 0xa7}], 0x10000000000001e5, 0x400000000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="a0696c65300a"], 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000000140)={0x4, 0x9}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept(r0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 01:42:00 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:01 executing program 5: gettid() r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000040)=0x3ff, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000000c0)=0x7fff) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001700)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000000540)=""/83, 0x53}, {&(0x7f0000001600)=""/22, 0x16}, {&(0x7f0000001640)=""/167, 0xa7}], 0x10000000000001e5, 0x400000000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="a0696c65300a"], 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000000140)={0x4, 0x9}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept(r0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 320.656197][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 320.662474][ T2878] libceph: mon0 (1)[d::]:6789 connect error 01:42:01 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f00000002c0)={0x3, 0x1, [0x2, 0x1, 0x7, 0x3, 0x0, 0x6, 0x3, 0x4]}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x18}], 0x1000014, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x8000) fcntl$dupfd(r4, 0x605, r1) write(r2, &(0x7f0000000600)="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", 0x200) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0xf0, 0x100001) sendfile(r2, r3, 0x0, 0x7fffffa7) [ 321.029211][ T26] audit: type=1800 audit(1574214121.461:71): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=22 res=0 01:42:01 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x5e}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, r5}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x8000, 0x6, 0x6, r5}, 0x10) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) read(r0, &(0x7f0000000000)=""/188, 0xbc) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 01:42:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000280)=r2) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r6 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xfffffffffffffe76) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r8, 0x400454ce, r9) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x460, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r9, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303031303030312c626c6b73697a653d3078303030303030303030303030303430302c636f6e746578743d73797374656d5f752c7063723d30303030303030303030303030303030303035392c736d61636b6673666c6f6f723d657468312c7375626a5f726f6c653d73656c696e75786c6f776c616e303a59cc2c61707072616973655f747970653d696d6173696794f80ffc2c00"]) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x4e28, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000140)="cd27c0d84df0ad804ad5262a10c5f4", 0xf}, {&(0x7f00000012c0), 0xfc00}, {&(0x7f0000001340)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6d8f64f95c69e8a", 0xdc}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45ee22ba99cfe850d62e87e556e8fa3459d346b4d1a572c7334773", 0x3c}], 0x6}}], 0x1, 0x4000000) [ 321.166017][ T26] audit: type=1804 audit(1574214121.471:72): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir271661050/syzkaller.MiWpji/39/file0/file0" dev="loop2" ino=22 res=1 01:42:01 executing program 2: r0 = socket(0x200000000010, 0x0, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000640)='nsfs\x00\xf1\xb07\xb0IF\xca\xc4&\xf1\r\x8a\x9d\x84\xf0\x0f9m\xc1\xa2\xc9\x9d\x01\xfbp\'\xfa\xf9\xceP?\xd1n\x9dQ\xff\xbb%\x88\xc4V4\xe40\x1a\n@\xdfw\xa5\xec\tAi\x19\xef\xde\xae\xb5\x949h\x91\xff\xd6V\x82\xb9*\xd0\xa9\xf4\xd2\x17\xfcD\t\x84\xb3y\x9b\x93\xc6\xa1\xceU\xd2\x0f~\xe1\x1cS\xd7Q\xedz\x18\xbeN\x84\xea\v)\aD\xae6\xe5\xf5\xe2D\xcc\x0fv\xc2nE\x8eX\x05\a\x17~\x90', 0x6048ac87bcab9e67, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000340)={@loopback, @initdev}, &(0x7f0000000140)=0xfffffffffffffd76) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100)={0x3, [0x1, 0x78, 0x1]}, 0xa) fsetxattr(r0, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01fb0000000000000002410000000c060000000000000000000000f26aa2e300f89bee7e248817616400000000002fae3d66cfe400"/68], 0x3}}, 0x0) 01:42:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x628220, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000080)={@remote}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=@mpls_getroute={0x1c, 0x1a, 0x8, 0x70bd26, 0x25dfdbfd, {0x1c, 0x80, 0x80, 0x5, 0xfd, 0x2, 0xc8, 0x2, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008}, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(crc32c-generic,ecb-serpent-avx)\x00'}, 0x58) fcntl$setstatus(r0, 0x4, 0x86800) 01:42:01 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:01 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) close(r1) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) fgetxattr(r5, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', &(0x7f00000000c0)=""/221, 0xdd) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:42:02 executing program 5: gettid() r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000040)=0x3ff, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000000c0)=0x7fff) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001700)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000000540)=""/83, 0x53}, {&(0x7f0000001600)=""/22, 0x16}, {&(0x7f0000001640)=""/167, 0xa7}], 0x10000000000001e5, 0x400000000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="a0696c65300a"], 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000000140)={0x4, 0x9}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept(r0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 321.687182][ T2552] rpcbind: RPC call returned error 22 01:42:02 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20}, 0x1c) r1 = pkey_alloc(0x0, 0x0) pkey_free(r1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x4a, r3, 0x400, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0xfffffffffffffee6, 0x18, {0xefffffff, @link='bronk\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008014) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x3b8c3dfc45cf9699) [ 321.812596][ T9288] rpcbind: RPC call returned error 22 [ 321.925652][ T26] audit: type=1400 audit(1574214122.361:73): avc: denied { name_bind } for pid=10623 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 322.029992][ T26] audit: type=1400 audit(1574214122.381:74): avc: denied { node_bind } for pid=10623 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 01:42:02 executing program 0: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000011c0)={r4, 0x9}, &(0x7f0000001200)=0x8) sendto(r0, &(0x7f00000001c0)="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", 0x1000, 0x848, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @dev={[], 0x15}, 'rose0\x00'}}, 0x80) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000013c0)=0x200, 0x4) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x8, 0x2, 0x0, 0x0, 0x0}) 01:42:02 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000007c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/28, 0x1c}}], 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000004e00)=[{0x0, 0x36b, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18}], 0x4924924924926de, 0x0) 01:42:02 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x9, {0x2, 0xb128, 0x6, 0xfffffff9, 0x8, 0xef8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xf}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 322.191532][ T26] audit: type=1400 audit(1574214122.411:75): avc: denied { name_connect } for pid=10623 comm="syz-executor.0" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 01:42:02 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') 01:42:02 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x100000000014b03e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x22f}, 0xfffffffd}], 0x147, 0xc0010320, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='wchan\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) inotify_init1(0x0) 01:42:03 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x101, 0x7, 0x80000000, 0x0, 0xa6}, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) ptrace$setopts(0xffffffffffffffff, r2, 0x10001, 0x111) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f0000000900)='system_u:obj\x0f\xae\xc4\x1ds:auditctl_dxec_t:s0\x00', 0x25, 0x3) ioctl$RTC_AIE_ON(r3, 0x7001) r4 = getpgrp(0x0) setpriority(0x0, r4, 0x100) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r5) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') dup(0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x10000, 0x3c}, {0xffffffff00000000}]}, 0x14, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[0x0]) 01:42:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="02040000e5d9700c00cbdcf716190000000000000000000005000100000000000a001b9a75c5f408760a00000000000000000000000000000040ffffac1e0001ff00000000000000020001000000000000000000000000000300050005000000000078e6378da116f1f057703466f6961b88203b2c046439c08aca2bde672be262f28d2bbd6b3cf03b2bf5e7ce844f4dce50b0abea73326ba0e4385160af759b78e0623d7cc4b30a6784e526863391c4c0c2c9c14bb2e2f6e9efbe4df774f9de35bf4a28e52c46b21f1c2c906734f6498b880065c3f32152f53c11d91de4d950c9075eb1f256601a005c85002c685bec83e82ca51533b3e57b4c13264d5c390786df3ccb227cfc8014b5cf8c431f9d5cf3aef1f7c6f4bf9a9c420df7d6bc18dc0469e086c05d8fe2f2574b25a201e0977547abe7df464c"], 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x41cc736e8961de95}) r3 = socket$inet6(0xa, 0x4, 0x82) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000040)=[@in={0x2, 0x0, @multicast1}]}, &(0x7f0000000100)=0x10) fstatfs(r3, &(0x7f0000000480)=""/251) [ 322.671620][ T2878] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) 01:42:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') 01:42:03 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:03 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20c10}, r1, 0x9, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x25d) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x678, 0x118, 0x118, 0x118, 0x118, 0x0, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x4, &(0x7f00000000c0), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [0xffffffff, 0x0, 0xffffffff, 0x7f], [0xff, 0xffffff00, 0xffffff00, 0x7ffffe01], '\x00', 'rose0\x00', {0xff}, {}, 0x78, 0x9, 0x2, 0x18}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x0, 0xff, 0x1f, 0x7f, 0x9, 0x200, 0x100}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0x4}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa3b59a2bbc63c1d1, 0x20, 0x7ad4}}}, {{@uncond, 0x0, 0x320, 0x348, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x10001, 0x6, 0x9, 0x6, 0x2, 0x1, [@empty, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @mcast1, @rand_addr="2709c1b0cc586d7fd760522e5349e0a7", @local, @dev={0xfe, 0x80, [], 0x2b}, @dev={0xfe, 0x80, [], 0x1e}, @dev={0xfe, 0x80, [], 0x13}, @mcast2, @dev={0xfe, 0x80, [], 0x22}, @rand_addr="bc44f9c5b3e1a87dd5dd13df49a91bf4", @loopback, @mcast1, @rand_addr="a03de9cbca341a94849353b46d4f699b"], 0x4}}, @common=@unspec=@comment={0x120, 'comment\x00'}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x81, 0xb400, 0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) sendto$inet6(r4, 0x0, 0xfffffffffffffffa, 0x20004001, &(0x7f0000000080)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) splice(r4, 0x0, r3, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x2b) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = getpgrp(0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000900)={0x0, 0x0, 0x7, 0x0, [], [{0xf8, 0x9, 0x8, 0x8, 0x7, 0x2}, {0x6, 0x9, 0x8, 0xffff}], [[], [], [], [], [], [], []]}) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000100)=r6) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 01:42:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000001000000000ff0100000000000000000055db8d056d7d84ff6968047419d09408afb19c64306a9d4e36a9272c286093f215ff8e1307ea7970c1ef8d86fb914eed62f947ea17f5e5b60e474efe3e759f60c57b7bffff000000000000b1df98043c0272967f952ed1a3243a15dcbdddfe5f708f0fdd1a8e0dd55c16f6c164f53b805fd1feba3d9981679afaef4b6de0750d312edbae5553eae1dca4b8915f9799138cf5c9d752c4d640a3429bee1efa1653666912f36c7f5aa511a56c7fd9bf2bd5befcf863c3a70c9bdf", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 01:42:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') [ 323.169166][ T26] audit: type=1400 audit(1574214123.601:76): avc: denied { mac_admin } for pid=10680 comm="syz-executor.2" capability=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 323.202739][T10680] SELinux: Context system_u:objs:auditctl_dxec_t:s0 is not valid (left unmapped). 01:42:03 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, 0x0) 01:42:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') 01:42:04 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000040)={0x3ff, 0x4, 0x9, 0xaf, 0x7f, 0x200}) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) userfaultfd(0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000240)={0x20, 0x4, 0x1, 0xd8e, 0x6, [{0x4, 0x6, 0x5, 0x0, 0x0, 0x803}, {0xfffffffffffff37b, 0x10001, 0xfc2, 0x0, 0x0, 0xdf54574e5eaeab65}, {0x100000001, 0xb87, 0x8, 0x0, 0x0, 0xcfd1c86068e8658e}, {0xce1, 0xfffffffffffffe01, 0x9499, 0x0, 0x0, 0x6b8d}, {0xffffffff, 0x100000001, 0xfffffffffffffff9}, {0xfffffffffffffff8, 0x8001, 0x3}]}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r3, r5, 0x0, 0x80001d00c0d0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x2000) fchown(r5, 0x0, r6) 01:42:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000040)={0xf000, 0xd001, 0xa20e, 0xee1, 0x80}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) 01:42:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0xa00000000000000]}, 0x3c) modify_ldt$write(0x1, &(0x7f0000000000)={0x1, 0x20000000, 0x2000, 0x1, 0x3, 0x1}, 0x10) [ 324.004389][T10725] device nr0 entered promiscuous mode 01:42:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:04 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:04 executing program 3: write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x80000001, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x8001008, 0xa4e, 0x7}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00') ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x9c0be) pipe(0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000080", @ANYRES16=0x0, @ANYBLOB="020026bd7000000000000d000000080004"], 0x3}, 0x1, 0x0, 0x0, 0x1800}, 0x0) 01:42:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 324.672012][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 324.720340][ T2878] libceph: mon0 (1)[d::]:6789 connect error 01:42:05 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x1b5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e25, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x7fffef55]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)="40993d03d4160e37b25a94cbc7259bc9fe6cb7e852497680e4831e93ecc3616218f77a4192dbe6268ba6bda3c390c4eab668c4f8a474f4f97e82fee609222471b63d66c4937301f4eba630a4b9eea56ec482c477bdd2dc800f44cb6cbbbcb304c49471b809fec0033ae10eb879f75fdd0313b89d9471215c4e97f6cf1065da58c1c91949989fe5cd63e83406bdba94189c47dd71a77b630e1681fc5a5b87daa9ad266e308ec2811db490e20f1715c0803b37c2f44e58dcec653bf73aa0d96a4b1be4c428484d1d8a6469522fae80bc2b969dad1aa9c6d788cf2063ac144df61b62bc2d0132379b41ae9167") 01:42:05 executing program 0: ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:05 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x25, 0x8, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r12, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) 01:42:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x24, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}], @vti_common_policy=[@IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_OKEY={0x8}, @IFLA_VTI_IKEY={0x8}]]}}}]}, 0x50}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$input_event(r4, &(0x7f0000000080)={{r5, r6/1000+10000}, 0x4, 0x6f05, 0x2}, 0x18) 01:42:05 executing program 0: ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:05 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 325.445318][T10728] device nr0 entered promiscuous mode [ 325.451620][ T26] audit: type=1400 audit(1574214125.861:77): avc: denied { map } for pid=10759 comm="syz-executor.5" path="/dev/nullb0" dev="devtmpfs" ino=17971 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 [ 325.625674][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 325.631741][ T2878] libceph: mon0 (1)[d::]:6789 connect error 01:42:06 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:06 executing program 0: ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:06 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x25, 0x8, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r12, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) 01:42:06 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x25, 0x8, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r12, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) 01:42:07 executing program 2: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x74, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0xfffffffffffffeba}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0xfffffffffffffdbf}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40000009}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x74}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$tipc(r4, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 01:42:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 326.655391][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 326.661727][ T2878] libceph: mon0 (1)[d::]:6789 connect error 01:42:07 executing program 4: perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 326.703598][T10788] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 326.734935][T10788] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.2'. [ 326.785642][T10788] selinux_nlmsg_perm: 20 callbacks suppressed [ 326.785659][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10788 comm=syz-executor.2 [ 326.835211][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10788 comm=syz-executor.2 [ 326.905121][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10788 comm=syz-executor.2 01:42:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 326.980628][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10788 comm=syz-executor.2 01:42:07 executing program 4: perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 327.044991][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10788 comm=syz-executor.2 [ 327.115226][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10788 comm=syz-executor.2 [ 327.207988][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10788 comm=syz-executor.2 01:42:07 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x25, 0x8, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r12, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) 01:42:07 executing program 4: perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 327.372571][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10788 comm=syz-executor.2 01:42:07 executing program 3: syz_mount_image$iso9660(&(0x7f0000000300)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@nocompress='nocompress'}]}) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) [ 327.503414][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10788 comm=syz-executor.2 01:42:08 executing program 4: mkdir(0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 327.601707][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10788 comm=syz-executor.2 01:42:08 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000240007ff000004000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010067726564000000004c00020008000500000000000800050000000000380003000590fc000000000028ceb860244d6a9b000000000000000000000000000000000000000000000002000000000000"], 0x7c}}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x32b, 0x24800) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000100)={0x5, 0x5, 0x8000, 0x821, '\x00', 0xa405}) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000000)=[@assoc={0xfffffffffffffefd, 0x117, 0x4, 0x2}], 0x18}], 0x1, 0x0) 01:42:08 executing program 4: mkdir(0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:08 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:08 executing program 2: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000200)={0x3, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, {{0x2, 0x4e24, @rand_addr=0x7fffffff}}}, 0x108) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)) ptrace$peek(0x2, r0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b0a00ff00b1b610c142122c7f2a207e"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 01:42:08 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:08 executing program 4: mkdir(0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:09 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x25, 0x8, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r12, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) 01:42:09 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0xb71dd179e054ba01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) syz_open_dev$vcsa(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000140)) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0xbe0, 0x0, 0x2}, 0x1c) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000180)={0xc87b, 0xfffc, 0x7, @dev={[], 0x12}, 'bridge_slave_1\x00'}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0xbe0, 0x0, 0x2}, 0x1c) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@empty, @initdev}, &(0x7f0000000080)=0xc) socket$inet(0x10, 0x3, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) read(r3, 0x0, 0x3c5) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) sendmsg(r4, 0x0, 0x20020044) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000980)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b80018010000000000000000000000000000000000000000000000002000736f636b657400000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000001f00000008000000000000000200000007000000080000000200000006000000ff07000000020000090000000000000000010000070000000900000008090000ac1e0101ac1414bbff000000ff00000076657468305f746f5f626f6e6400000076657468305f746f5f62726964676500000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000eb00004000000000000000000000000000000c01300100000000000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000b00000002000000020000002400737461746500000000000000000000000000000000000000000000000000f3040000240052454a4543540000000000000000000000000000000000000000000000000100"/650], 0x2) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000cc0)=ANY=[], 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x6df6c76e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0xee72) sendfile(r6, r7, 0x0, 0x8000fffffffe) 01:42:09 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000001, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xc2, "64765b6caf4263a43c71c2e6a90fb05e18222e404794c782a2b578882164f27f1705af7ed6b30f24d8742c565263f1d448c3c1f3d5fe8a376329d678e60b0d1640ef64a85e646029fe74fba0183e4f515c1b5966098694ff3bac06a93aacd6354f0bf95089334ff76959f1fa3a330be1c87b1ad7e755d6f7686be20bd725d7ac343053854ba3f835ee26144b92f91ef4dacffe1a9e26a86bc7778e3c047aca679c873a302b3490b5089799c3b172b8f6fe2822f5d5366d0d1af2f67de435c1c1d7b4"}, &(0x7f0000000280)=0xca) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={r6, 0xf9dc, 0x34e}, &(0x7f0000000340)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffd02, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001400210100000000000000000a000000", @ANYRES32=r7, @ANYBLOB="080008000000000014000200000000000003000000000000000000011400010000f70000000000000000ffffac1e000114000600000000009d090000000000000000000087e1fe5f643069115e1ae7e558bbe87a0970045beb953f2cff16efba201a313b989a56b1ad28171436372f016653eab685abae8d5f4beb837c5835a7633e4bf8ea2e736f1443a1be0eb9e81539992217e671f8010db9423773c1f30e5503e1243e892ec388323128e28505e319e01119485e73765b21599791c4cdfd6f9e4a1a78c70f0a93f25c63427bf3575e192819e39cd167fb8a79641e8e6a667cc7c72863f07991"], 0x5c}}, 0x0) 01:42:09 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) 01:42:09 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:09 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) [ 328.744256][ T2878] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) 01:42:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x0, 0x11, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x7}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) r0 = socket(0x3, 0x805, 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000100)={@in={0x2, 0x0, @multicast2}, {0x0}, 0x0}, 0xa0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000280)={0x7f, 0x8ce}) connect(r0, 0x0, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000000)=@req3={0xbe0, 0x0, 0x2}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@initdev, @in6=@mcast1}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000840)=0xfffffffffffffee4) stat(0x0, &(0x7f0000000580)) lstat(&(0x7f0000000600)='./file0\x00', 0x0) lstat(&(0x7f0000000380)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000040)) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, 0x0}}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e000000330005", 0x7}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0063860920c6c7d26af0ecd6b9ab6aab4c0f16c80c5aa99e"], 0xfdef) 01:42:09 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:09 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) 01:42:09 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)) 01:42:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x7, 0x84) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x7, 0x0, "2b6a4b8ff6d9887f5a01f291a7c275509ef66639177dc37262c7a7463563aa66f3fa30d22184c3bd444069c018f8b769d5a2755cdcf68b55f18b5fe28e2600629f992aef924b7bb5c1a7b98865a02302"}, 0xfffffee2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r5 = accept4(r4, &(0x7f0000000200)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000280)=0x80, 0x100000) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x6022dd87, @mcast2, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_procs(r7, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) fcntl$setownex(r8, 0xf, &(0x7f0000000340)={0x1, r9}) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000001c0)={0x0, 0x3}) [ 329.315980][T10874] device nr0 entered promiscuous mode 01:42:09 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:10 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x25, 0x8, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r12, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:10 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)) [ 329.650167][ T9195] libceph: mon1 (1)[::6]:6789 socket error on write 01:42:10 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)) 01:42:10 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 330.054354][T10903] FAULT_INJECTION: forcing a failure. [ 330.054354][T10903] name failslab, interval 1, probability 0, space 0, times 1 [ 330.069080][T10903] CPU: 0 PID: 10903 Comm: syz-executor.0 Not tainted 5.4.0-rc8 #0 [ 330.076929][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.087003][T10903] Call Trace: [ 330.090407][T10903] dump_stack+0x197/0x210 [ 330.094771][T10903] should_fail.cold+0xa/0x15 [ 330.099389][T10903] ? fault_create_debugfs_attr+0x180/0x180 [ 330.105225][T10903] ? ___might_sleep+0x163/0x2c0 [ 330.110131][T10903] __should_failslab+0x121/0x190 [ 330.115099][T10903] should_failslab+0x9/0x14 [ 330.119628][T10903] __kmalloc+0x2e0/0x770 [ 330.123892][T10903] ? mark_held_locks+0xf0/0xf0 [ 330.128693][T10903] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 330.134446][T10903] tomoyo_realpath_from_path+0xcd/0x7b0 [ 330.140020][T10903] ? tomoyo_path_number_perm+0x193/0x520 [ 330.145786][T10903] tomoyo_path_number_perm+0x1dd/0x520 [ 330.151267][T10903] ? tomoyo_path_number_perm+0x193/0x520 [ 330.156942][T10903] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 330.162782][T10903] ? __f_unlock_pos+0x19/0x20 [ 330.167499][T10903] ? ___might_sleep+0x163/0x2c0 [ 330.172393][T10903] ? selinux_file_mprotect+0x620/0x620 [ 330.177880][T10903] ? __fget+0x384/0x560 [ 330.182066][T10903] ? ksys_dup3+0x3e0/0x3e0 [ 330.186505][T10903] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 330.192772][T10903] ? fput_many+0x12c/0x1a0 [ 330.197221][T10903] tomoyo_file_ioctl+0x23/0x30 [ 330.202015][T10903] security_file_ioctl+0x77/0xc0 [ 330.206981][T10903] ksys_ioctl+0x57/0xd0 [ 330.211165][T10903] __x64_sys_ioctl+0x73/0xb0 [ 330.215784][T10903] do_syscall_64+0xfa/0x760 [ 330.220965][T10903] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.226886][T10903] RIP: 0033:0x45a639 [ 330.230802][T10903] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:42:10 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x25, 0x8, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r12, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 330.250422][T10903] RSP: 002b:00007f1ce7c63c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.258944][T10903] RAX: ffffffffffffffda RBX: 00007f1ce7c63c90 RCX: 000000000045a639 [ 330.266937][T10903] RDX: 00000000200000c0 RSI: 0000000040045613 RDI: 0000000000000003 [ 330.274927][T10903] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.282923][T10903] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ce7c646d4 [ 330.290916][T10903] R13: 00000000004c6194 R14: 00000000004db238 R15: 0000000000000004 01:42:10 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 330.567010][T10914] device nr0 entered promiscuous mode [ 330.656369][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 330.662436][ T2878] libceph: mon0 (1)[d::]:6789 connect error [ 330.664915][T10903] ERROR: Out of memory at tomoyo_realpath_from_path. 01:42:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x0, 0x11, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x7}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) r0 = socket(0x3, 0x805, 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000100)={@in={0x2, 0x0, @multicast2}, {0x0}, 0x0}, 0xa0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000280)={0x7f, 0x8ce}) connect(r0, 0x0, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000000)=@req3={0xbe0, 0x0, 0x2}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@initdev, @in6=@mcast1}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000840)=0xfffffffffffffee4) stat(0x0, &(0x7f0000000580)) lstat(&(0x7f0000000600)='./file0\x00', 0x0) lstat(&(0x7f0000000380)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000040)) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, 0x0}}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e000000330005", 0x7}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0063860920c6c7d26af0ecd6b9ab6aab4c0f16c80c5aa99e"], 0xfdef) 01:42:11 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xff4f) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010000507000000000000f8ff00405a6b88a68c8145bc9e824bec15e78da371af67c90c75a122d8919d2f9d46a20b28931f97485703c2aa66403147879ba5cb170f795529f9c3d2c0a8926bc84eb62be4721c1f20475d7a167e7f25a52f343fc1", @ANYRES32=r8, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @empty}]}, 0x20}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 01:42:11 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:11 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x25, 0x8, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r12, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:11 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 331.419262][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:42:11 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x2, &(0x7f00000000c0)=0x2) 01:42:12 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 331.545439][T10930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 331.617027][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 331.624669][ T2878] libceph: mon0 (1)[d::]:6789 connect error 01:42:12 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x25, 0x8, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r12, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:12 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x25, 0x8, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r12, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:12 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x10, &(0x7f00000000c0)=0x2) [ 331.904074][T10937] device nr0 entered promiscuous mode 01:42:12 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:12 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x1275, &(0x7f00000000c0)=0x2) [ 332.665234][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 332.671609][ T2878] libceph: mon0 (1)[d::]:6789 connect error 01:42:13 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x4b47, &(0x7f00000000c0)=0x2) 01:42:13 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x25, 0x8, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r12, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x121403) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x82\x1e\x7f\xa4\x00@\x00\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x800}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') accept$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 01:42:13 executing program 2: socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x4c0793d2ea6a4a52}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000780)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000440)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x68a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200000, 0x3ff, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r2, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08000000d35458b171a0c6b37408a2cc9940ec124825b89f6c051cf8c23c89fcc0860cdbc9d5783e82e5527f3f07f6c141b1fdc9bc22c2ab5a22ceecece0e3e395c3c7af5bb72465b6b607ae68a67c4a82838f815ea2bd3ef763d845a71522cb7ce96ca879b4b2b21f287635e191e1fea56d9b3908c7041100f0ac63d955e9", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf250800000008000500080000004000030008000100020000000800050000000000080007004e22000008000100010000000800030003000000140006005a6ee8d2c3c5f7a79c964a3af3702a62"], 0x3ea}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x1, 0x1) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f00000004c0)=',vmnet0systemvboxnet0vmnet0\x00'}, 0x30) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r6 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x1) close(r6) ioctl$TUNSETLINK(r5, 0x400454cd, 0x308) socket$kcm(0x29, 0x5, 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r8, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r8, &(0x7f0000000340)="27bbdd1536ad72843f6945a70c12e0e3390d7289de9c234334e408310adf622ceeabbf0ec0739578da6ec0f37e1d6934e7fddc618bb368b0392de879bdc176461e259833e178f42720c4a452bd95e6cef67c889ee0972e0526b940a51a2e1c76113b9183040e14d0bafb924a1c769cd93631800af1e6b7ca70ef31c339368bf4f3a92d5f5f2407bdf78ebe400f7143911ee2d390643e8389878f6777fc7207ffae4db1f2237821cfeeb60c2e27a068"}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-monitor\x00', 0x62e400, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f0000000700)) socketpair(0x2, 0x3, 0x0, 0x0) 01:42:13 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x400, @default, @rose={'rose', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000000c0)={0xe12, 0x0, 0x10001, 0xff}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000140)={0x1b5, r5, 0x10001, 0x10000000000}) [ 332.851029][ T26] audit: type=1400 audit(1574214133.281:78): avc: denied { create } for pid=10966 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 01:42:13 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x4b49, &(0x7f00000000c0)=0x2) 01:42:13 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 332.963840][ T26] audit: type=1400 audit(1574214133.321:79): avc: denied { ioctl } for pid=10966 comm="syz-executor.3" path="socket:[36742]" dev="sockfs" ino=36742 ioctlcmd=0x8914 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 01:42:13 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x4c00, &(0x7f00000000c0)=0x2) 01:42:13 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x25, 0x8, @thr={0x0, 0x0}}, &(0x7f0000000540)) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0800a1695e1dcfe87b1071") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0xfffffffffffffea9, 0x0, 0x0}) 01:42:13 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'}) socket$netlink(0x10, 0x3, 0x15) r0 = open(&(0x7f0000000080)='./bus\x00', 0x80200, 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000540)={0x3, 0x5, 0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000021000100000000000000000002000000000000008b00000008000b000100"/48], 0x30}}, 0x20004000) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x7, 0x40}) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000021000100000000000000000002000000000000000000114f92bc000008000e0000800000080013000100000008000b0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept4$rose(r0, &(0x7f0000000180)=@full={0xb, @remote, @bcast, 0x0, [@default, @rose, @remote, @remote, @bcast, @default]}, &(0x7f00000001c0)=0x40, 0x800) [ 333.364259][ T26] audit: type=1400 audit(1574214133.791:80): avc: denied { map } for pid=10975 comm="syz-executor.2" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 01:42:13 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x4c01, &(0x7f00000000c0)=0x2) [ 333.533504][ T26] audit: type=1400 audit(1574214133.951:81): avc: denied { set_context_mgr } for pid=11007 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 333.555521][T11010] debugfs: File '11007' in directory 'proc' already present! 01:42:14 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x541b, &(0x7f00000000c0)=0x2) [ 333.680912][ T26] audit: type=1400 audit(1574214133.961:82): avc: denied { create } for pid=11009 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 333.758221][T11015] binder: 11007:11015 ioctl c0306201 20000080 returned -14 01:42:14 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'}) socket$netlink(0x10, 0x3, 0x15) r0 = open(&(0x7f0000000080)='./bus\x00', 0x80200, 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000540)={0x3, 0x5, 0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000021000100000000000000000002000000000000008b00000008000b000100"/48], 0x30}}, 0x20004000) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x7, 0x40}) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000021000100000000000000000002000000000000000000114f92bc000008000e0000800000080013000100000008000b0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept4$rose(r0, &(0x7f0000000180)=@full={0xb, @remote, @bcast, 0x0, [@default, @rose, @remote, @remote, @bcast, @default]}, &(0x7f00000001c0)=0x40, 0x800) 01:42:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000140)) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="480000001400e700b05f9f95274b0a0002840000400403fe0500030001546fab07004e7d063630f10a8a6a36d47a56aa68c6f8c36da6bd7c497626ff19343dcdbfae0000000000d9", 0x48}], 0x1}, 0x0) [ 335.373169][ T9195] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) 01:42:16 executing program 2: socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x4c0793d2ea6a4a52}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000780)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000440)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x68a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200000, 0x3ff, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r2, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08000000d35458b171a0c6b37408a2cc9940ec124825b89f6c051cf8c23c89fcc0860cdbc9d5783e82e5527f3f07f6c141b1fdc9bc22c2ab5a22ceecece0e3e395c3c7af5bb72465b6b607ae68a67c4a82838f815ea2bd3ef763d845a71522cb7ce96ca879b4b2b21f287635e191e1fea56d9b3908c7041100f0ac63d955e9", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf250800000008000500080000004000030008000100020000000800050000000000080007004e22000008000100010000000800030003000000140006005a6ee8d2c3c5f7a79c964a3af3702a62"], 0x3ea}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x1, 0x1) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f00000004c0)=',vmnet0systemvboxnet0vmnet0\x00'}, 0x30) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r6 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x1) close(r6) ioctl$TUNSETLINK(r5, 0x400454cd, 0x308) socket$kcm(0x29, 0x5, 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r8, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r8, &(0x7f0000000340)="27bbdd1536ad72843f6945a70c12e0e3390d7289de9c234334e408310adf622ceeabbf0ec0739578da6ec0f37e1d6934e7fddc618bb368b0392de879bdc176461e259833e178f42720c4a452bd95e6cef67c889ee0972e0526b940a51a2e1c76113b9183040e14d0bafb924a1c769cd93631800af1e6b7ca70ef31c339368bf4f3a92d5f5f2407bdf78ebe400f7143911ee2d390643e8389878f6777fc7207ffae4db1f2237821cfeeb60c2e27a068"}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-monitor\x00', 0x62e400, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f0000000700)) socketpair(0x2, 0x3, 0x0, 0x0) 01:42:16 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:16 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x5421, &(0x7f00000000c0)=0x2) 01:42:16 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:16 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'}) socket$netlink(0x10, 0x3, 0x15) r0 = open(&(0x7f0000000080)='./bus\x00', 0x80200, 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000540)={0x3, 0x5, 0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000021000100000000000000000002000000000000008b00000008000b000100"/48], 0x30}}, 0x20004000) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x7, 0x40}) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000021000100000000000000000002000000000000000000114f92bc000008000e0000800000080013000100000008000b0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept4$rose(r0, &(0x7f0000000180)=@full={0xb, @remote, @bcast, 0x0, [@default, @rose, @remote, @remote, @bcast, @default]}, &(0x7f00000001c0)=0x40, 0x800) 01:42:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000140)) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="480000001400e700b05f9f95274b0a0002840000400403fe0500030001546fab07004e7d063630f10a8a6a36d47a56aa68c6f8c36da6bd7c497626ff19343dcdbfae0000000000d9", 0x48}], 0x1}, 0x0) 01:42:16 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x5450, &(0x7f00000000c0)=0x2) 01:42:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x4c}}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x401402}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) getuid() open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) 01:42:16 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000000)=@req3={0xbe0, 0x0, 0x2}, 0x1c) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 01:42:16 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x5451, &(0x7f00000000c0)=0x2) [ 335.931888][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 335.946787][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:42:16 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:16 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x5452, &(0x7f00000000c0)=0x2) [ 336.659542][ T9195] libceph: connect (1)[d::]:6789 error -101 [ 336.670152][ T9195] libceph: mon0 (1)[d::]:6789 connect error 01:42:17 executing program 2: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x5460, &(0x7f00000000c0)=0x2) 01:42:17 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x48040, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x0, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002600}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffe4f, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002300010000000000000000000400000014000c000000000000824f860b343bda5824139e814e2d609a192e1ba0bf002f677bab975ce85d26b66562a932161e312526a55efa9f76d31bf71d6d9a0e0f889a15e5034827390c94710c964f0dd8a52ea1eb56c7daba05f432b667724c8a78c3bd6c95b2054ae4796c911a9160a24fb72c16685ff5c31b5abd8c24b2fcd413157ee9e67694499cbd73701f78970caf5ef3"], 0x28}}, 0x0) 01:42:17 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:17 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb0}, 0x48) 01:42:17 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 337.616230][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 337.622288][ T2878] libceph: mon0 (1)[d::]:6789 connect error [ 337.638827][ T26] audit: type=1400 audit(1574214138.071:83): avc: denied { bind } for pid=11086 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 01:42:18 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x6364, &(0x7f00000000c0)=0x2) [ 337.639623][T11096] netlink: 'syz-executor.3': attribute type 12 has an invalid length. 01:42:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000001300"}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x800000000000273, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="51e9d562b8deca739c5c1e57a5e1a65b", 0x10) 01:42:18 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:18 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x8912, &(0x7f00000000c0)=0x2) 01:42:18 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:18 executing program 1: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:18 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000940)=0x7b) read$char_usb(r0, &(0x7f00000003c0)=""/100, 0x64) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x28, 0x8, [0x3, 0x7]}) shmget$private(0x0, 0x4000, 0x14, &(0x7f0000ffb000/0x4000)=nil) 01:42:18 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x8933, &(0x7f00000000c0)=0x2) 01:42:18 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:18 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100a07031dff22946fa2830020200a0009000300001d85687f0000000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0xc0, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=""/192}, &(0x7f00000001c0)=0x78) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0xf}, 0x9}, @in={0x2, 0x4e21, @remote}], 0x3c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x408, 0x1c0, 0xf0, 0x0, 0x290, 0xf0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x5, &(0x7f00000002c0), {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x8928a672f791b2c1, 'ip6tnl0\x00', 'eql\x00', {}, {0x101}, 0x0, 0x1, 0x1}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @remote, @multicast1, @icmp_id=0x66, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @rand_addr=0x8, @multicast1, @port=0x4e21, @gre_key=0x100}}}}, {{@ip={@broadcast, @rand_addr=0x7, 0xff000000, 0xffffff00, 'team0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x16, 0x2}, 0x0, 0x98, 0xd0}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @broadcast, @rand_addr=0x1f, @icmp_id=0x67, @gre_key=0x400}}}}, {{@ip={@rand_addr=0x2, @multicast2, 0xff000000, 0x55138768cfd8e1f6, 'nr0\x00', 'erspan0\x00', {0x7f}, {0x7f}, 0x84, 0x2}, 0x0, 0x98, 0xe0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x15, @ipv4=@empty, @ipv4=@remote, @gre_key=0x8, @gre_key=0xfff8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x80, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000240)={0x10}) [ 338.484021][ T26] audit: type=1400 audit(1574214138.911:84): avc: denied { write } for pid=11128 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 338.531030][T11122] fat__get_entry: 22 callbacks suppressed [ 338.531095][T11122] FAT-fs (loop1): Directory bread(block 513) failed 01:42:19 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:19 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xae01, &(0x7f00000000c0)=0x2) [ 338.578487][ T26] audit: type=1400 audit(1574214138.911:85): avc: denied { getopt } for pid=11128 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 338.605016][T11122] FAT-fs (loop1): Directory bread(block 514) failed [ 338.612255][T11122] FAT-fs (loop1): Directory bread(block 515) failed [ 338.656680][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 338.665947][T11122] FAT-fs (loop1): Directory bread(block 516) failed [ 338.714401][ T2878] libceph: mon0 (1)[d::]:6789 connect error [ 338.723712][T11122] FAT-fs (loop1): Directory bread(block 517) failed 01:42:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'gre0\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'bcsf0\x00'}, 0x18) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={r4, 0x8000, 0x7}, 0x8) [ 338.766605][T11122] FAT-fs (loop1): Directory bread(block 518) failed [ 338.773587][T11122] FAT-fs (loop1): Directory bread(block 519) failed [ 338.839775][T11122] FAT-fs (loop1): Directory bread(block 520) failed 01:42:19 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045431, &(0x7f00000000c0)=0x2) 01:42:19 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 338.881307][T11122] FAT-fs (loop1): Directory bread(block 521) failed 01:42:19 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 338.958820][T11122] FAT-fs (loop1): Directory bread(block 522) failed [ 338.964375][T11153] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 0, id = 0 [ 338.979332][T11152] IPVS: stopping backup sync thread 11153 ... 01:42:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x28, 0x33, 0x119, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1a, @uid=r1}, @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x28}}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000140)={0x8c, 0x2, 0x6}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000001c0)={0x6000, 0x0, 0x7, 0x400, 0x81}) [ 339.357078][T11167] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 339.439487][T11167] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:42:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x1ff, 0x80, 0x80}) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) r2 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x20820000, r2}, 0x2c) 01:42:20 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x400454ca, &(0x7f00000000c0)=0x2) 01:42:20 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000240)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r5, 0x0, 0x0, 0x0, {0x25}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2010}, 0x4000090) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)) 01:42:20 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:20 executing program 2: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:20 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045667, &(0x7f00000000c0)=0x2) 01:42:20 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) rt_sigqueueinfo(r1, 0x2c, &(0x7f0000000280)={0x2b, 0xfffff000, 0x7fff}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) r2 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0xfff, 0x400) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000440)={0x0, 0x5b53}, &(0x7f0000000480)=0x8) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000340)=""/239, 0x1000, 0x1800, 0x1}, 0x18) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000140)=0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6604000024cc3bae60c01e69dfc8a800f1ffffff", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000810800010063627100180402000404060003000000003bae10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x3}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={@rand_addr="48df30a67871d5c6c3bc1ee689bf5f02", @empty, @empty, 0x4, 0x5, 0x0, 0x0, 0xfffffffeffffffff, 0x4000000, r4}) 01:42:20 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40049409, &(0x7f00000000c0)=0x2) 01:42:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x1ff, 0x80, 0x80}) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) r2 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x20820000, r2}, 0x2c) 01:42:20 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x2, 0x0, {0x1, 0x4}}, 0x80, 0x0}}], 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x63f, 0x40000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000400), 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="8f68acd970a40f1898625fb7ab35d3dd10102f16401304fab1e879a0f4bb211ebb37aa6ef745aee191377480f849f67e1101203001013d08df4f678c6d97db1e1f0983156b5412b255bfdc3a6e63049ec140cb7d5a3bb5c02154f44504ab57612fee4ba4eae78a8fa012ce4c63b09b1dae42e65897b1c39e0ce00a6b3cad98a18d210d7b292b850692542c9bec8ece1a33c469d907363395bcc2599749d0128faf559131021737ae8edc3bf67104c89bfef16ef833a70a107416a933", 0xbc}, {&(0x7f00000000c0)="51bc75fe4c3087a47207338faa2054b16d6e01781d80a7fc5aeab6382889241f39e8fd25fcb27bf6e88df75963873cb29345cb92e935991a08e73adcc96b91ef0c3203cfaa6948a2f2903146055a0704c41e61814e2a88662efd89e694c4c8714375030a15633766c1b59b7242b42ac9200ff78a5614041414e4", 0x7a}, {&(0x7f0000000300)="5fd2e1bdf8437631972ab10faa991841f15c09bd3fb526d3559799d3ab2fea49e8e0c8c35e88c89e8d5d1476beedb0621fc776f381645ee15155fb97057225a27719c636d9713cd8035c7f68b9f11bcdc54eefa8c66c97a8dcbac8b1a24ab1e908cc8f02a2ee163a66173a759ae20d59fe74a71095b1b951f64558aa369cb0c5df3188ab1f63c295a35e02891fe4d592d7f2fd4113b37aeee02e3e3bac403010", 0xa0}], 0x3) 01:42:20 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f00000000c0)=0x2) 01:42:20 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r2, 0x100000003, 0x0, 0x28120001) io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 01:42:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000100)=0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @initdev}}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000001c0)={'lo\x00', 0x6c8}) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000000)={r4}, &(0x7f0000000200)=0x8) 01:42:20 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:20 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xf4\x82\x96\f\xc9\xa9\xc0\x0e\xba\x84\"\x1c\xcf\xd4\xce\xe5\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87\xec\x05#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\xff\x048\xb2\x02\xf1C\xdf\xa6\t\x00\x00\x00:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9K\xcb(\x9b{\xc8\xa79\xd4\xe6}\xde\xa8\xa6U\x89F\vHFW\x04\x1d\xc7LkW') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:20 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40087602, &(0x7f00000000c0)=0x2) 01:42:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x10, 0x802, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000031001902000000000000000000000000200001001c00000000000c000100736b62656469740004000200040006000000c7b36398c6c14dea6c0432d60a866ca8897b11a928061a7f41a4fa68f4b538ddc4df39cabb387c4d6452c419f0cfcd7b9082cfa37776757748497d70bcb25f7905327e5c2a0ec6"], 0x34}}, 0x0) [ 340.666727][ T2878] libceph: mon1 (1)[::6]:6789 socket error on write 01:42:21 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x4020565a, &(0x7f00000000c0)=0x2) 01:42:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7a, 0xa, 0xff00}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x6, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@int=0x3, 0x4) accept4$x25(r0, &(0x7f0000000180)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x800) 01:42:21 executing program 1: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x28040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='trusted.overlay.impure\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = creat(0x0, 0x0) pwritev(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}}, 0x4c000011) bind$packet(0xffffffffffffffff, 0x0, 0x0) chmod(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r2, &(0x7f0000000ea9)=""/407, 0x197) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000300)={'team_slave_1\x00', {0x2, 0x4e22, @loopback}}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x57b30b29efe9ab9d, 0x91, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000580)='./file0\x00', 0x80800, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0x3) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:42:21 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:21 executing program 3: write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000002c0)={0x18}, 0xffffffffffffffc5) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x8, 0x0, 0x80, 0x0, 0x4000008}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f00000001c0)='security.SMACK64EXEC\x00', &(0x7f0000000300)='./cgroup\x00', 0x9, 0x1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = getpgid(0x0) sched_rr_get_interval(r1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="c2f700007dd37d5cc31eae2c08f5193a9875bc1d332109e4e6ed6d19e443492b9263552900101278273c060a21063aa8d30d692163fc11bc52652404e5c7edbcde3c65196b97b38f8adde2d0742f725ce1332ce0d7f522f240acaf0b8d9a397d667692bece6b808d02eb5f2b11887e18cdbe729a98a47377723168c083f5edc14fcc3231cf9fcfb8f8c4b500476febdea5711fb658c991a4502c1d2a3fd65cda14d6bdb899882baf41a69156744ef664a5c46f230d6196bb161733ec36561be3953d70f61a715762a99f1ac51f"], 0xff86) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000200)={0xa0, 0x0, 0x5, {{0x6, 0x0, 0x6, 0xb0, 0x80000001, 0x0, {0x6, 0xfff, 0x100000001, 0x1, 0x20, 0x9, 0x80000000, 0x6fe3, 0x6, 0x8000, 0x3, 0x0, 0xee01, 0x29f4, 0x3}}, {0x0, 0x8}}}, 0xa0) open_by_handle_at(r2, 0x0, 0x100) accept$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 01:42:21 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:21 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x4020940d, &(0x7f00000000c0)=0x2) 01:42:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x10000000000) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000040)={@null, @null}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x53, 0x2) 01:42:21 executing program 1: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x28040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='trusted.overlay.impure\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = creat(0x0, 0x0) pwritev(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}}, 0x4c000011) bind$packet(0xffffffffffffffff, 0x0, 0x0) chmod(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r2, &(0x7f0000000ea9)=""/407, 0x197) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000300)={'team_slave_1\x00', {0x2, 0x4e22, @loopback}}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x57b30b29efe9ab9d, 0x91, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000580)='./file0\x00', 0x80800, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0x3) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:42:21 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40305828, &(0x7f00000000c0)=0x2) 01:42:21 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x8004510b, &(0x7f00000000c0)=0x2) 01:42:21 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000200000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d00a7ce006c6f0000000000000000000000000001000000000000000000000000100001010000e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000004000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 01:42:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000230047080000000000000000040000000c00180001ac0f000aac0f007970650005821ef75acb424f10d84d8b01b7db9498504e8e2e13e7073c38fca40b993ba71de32c3b388370621703c4afe961fe1af5bddefb518ef3cd9a349cd4dcd165083ff064d203e7380d2242cab7299b3e51ae5ccc96510f513502831869aad0c4e2b009bfb7fa1be6c90adfac49ea1365d32136dcc02c5d5c5edf3d3b39498bd0de3b1596e200b57f766fe8e381e2176029e3f145c8ba"], 0x269}}, 0x0) 01:42:22 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x80045430, &(0x7f00000000c0)=0x2) 01:42:22 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 341.634221][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 01:42:22 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:22 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x800454d2, &(0x7f00000000c0)=0x2) 01:42:22 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0xffffffffffffff80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b427ce9600120008000100736974000c00020008000300", @ANYRES32=r2], 0x38}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:42:22 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 341.959286][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:42:22 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x40, 0x5, 'client1\x00', 0x0, "51031252bdd5f1f6", "e22a80754501a6e680301525d6289cf8ebddd6adc957da997636ab204e0e5dbd", 0x93, 0xe1a}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000200)={0x80000001, 0x2, {0x0, 0x0, 0x9, 0xd0012de1b8802ef2, 0x9}}) r3 = socket$inet(0x10, 0x880400000003, 0x0) sendmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830002200a0007000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 342.034355][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:42:22 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:22 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x80086301, &(0x7f00000000c0)=0x2) 01:42:22 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000200)={0x1, @sliced={0x2, [0x20, 0x1000, 0x0, 0x7, 0x42, 0x5, 0x4, 0x6, 0x7, 0xeb, 0xa741, 0x4, 0xfffa, 0x2, 0x8, 0x3, 0x1, 0x40, 0x6, 0x2, 0xebaa, 0x100, 0xfa, 0x7f, 0x4, 0x4, 0x6, 0x5b6c, 0x8, 0x9, 0x8, 0x7, 0x4246, 0x9, 0x8001, 0x3, 0x8, 0xffe0, 0x17, 0x0, 0x8, 0x7, 0x1f, 0x6, 0x200, 0x101, 0x63, 0x2], 0x80000001}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) pkey_alloc(0x0, 0x2) [ 342.193308][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 01:42:22 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 342.406122][T11322] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:22 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x80086601, &(0x7f00000000c0)=0x2) 01:42:22 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0xe, &(0x7f00001c9fff)="02", 0x1) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) bind$ax25(r2, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) 01:42:23 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 342.655806][ T2878] libceph: mon1 (1)[::6]:6789 socket error on write [ 342.656898][T11331] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:23 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x80087601, &(0x7f00000000c0)=0x2) 01:42:23 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 342.717914][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 342.749905][ T2878] libceph: mon0 (1)[d::]:6789 connect error 01:42:23 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',cachetag=em1\\lo\\em1{md5sum(cgroup)[+)posix_acl_access.nodev}\b\x00']) 01:42:23 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000200)={0x1, @sliced={0x2, [0x20, 0x1000, 0x0, 0x7, 0x42, 0x5, 0x4, 0x6, 0x7, 0xeb, 0xa741, 0x4, 0xfffa, 0x2, 0x8, 0x3, 0x1, 0x40, 0x6, 0x2, 0xebaa, 0x100, 0xfa, 0x7f, 0x4, 0x4, 0x6, 0x5b6c, 0x8, 0x9, 0x8, 0x7, 0x4246, 0x9, 0x8001, 0x3, 0x8, 0xffe0, 0x17, 0x0, 0x8, 0x7, 0x1f, 0x6, 0x200, 0x101, 0x63, 0x2], 0x80000001}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) pkey_alloc(0x0, 0x2) 01:42:23 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:23 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x80885659, &(0x7f00000000c0)=0x2) [ 343.113450][T11357] 9pnet: Insufficient options for proto=fd 01:42:23 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000309ffff0000000000000000000000004f4c3f05c513b1230805d60bfc33e80426983676a17f2934bd389ddbadbed318c83f825af895ff707b5fe96b4163f2c89ef2f7991027febb7cc55b9e58bc6a691feb3e7618ca8775c272d4b1a6237e83543ab1466b1707bc39d7c6a4632e6bd27e66e210deaa15cc7c8766aaac4851fab36ee355ae79e9e2b9dc6b8bd566e57a80c34444d3d4fc618f0e2f5654ab9fee860419bfbd77a4beaa7fdc06162e516ce4019feb89d3d6017b8989dc4f132dd6669c45fb"], 0x14}, 0x1, 0xf000}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000180)={"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"}) [ 343.202586][T11362] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:23 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:23 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000200)={0x1, @sliced={0x2, [0x20, 0x1000, 0x0, 0x7, 0x42, 0x5, 0x4, 0x6, 0x7, 0xeb, 0xa741, 0x4, 0xfffa, 0x2, 0x8, 0x3, 0x1, 0x40, 0x6, 0x2, 0xebaa, 0x100, 0xfa, 0x7f, 0x4, 0x4, 0x6, 0x5b6c, 0x8, 0x9, 0x8, 0x7, 0x4246, 0x9, 0x8001, 0x3, 0x8, 0xffe0, 0x17, 0x0, 0x8, 0x7, 0x1f, 0x6, 0x200, 0x101, 0x63, 0x2], 0x80000001}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) pkey_alloc(0x0, 0x2) 01:42:24 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 343.615945][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 343.621974][ T2878] libceph: mon0 (1)[d::]:6789 connect error [ 343.692838][T11386] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:24 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:24 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:24 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000200)={0x1, @sliced={0x2, [0x20, 0x1000, 0x0, 0x7, 0x42, 0x5, 0x4, 0x6, 0x7, 0xeb, 0xa741, 0x4, 0xfffa, 0x2, 0x8, 0x3, 0x1, 0x40, 0x6, 0x2, 0xebaa, 0x100, 0xfa, 0x7f, 0x4, 0x4, 0x6, 0x5b6c, 0x8, 0x9, 0x8, 0x7, 0x4246, 0x9, 0x8001, 0x3, 0x8, 0xffe0, 0x17, 0x0, 0x8, 0x7, 0x1f, 0x6, 0x200, 0x101, 0x63, 0x2], 0x80000001}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) pkey_alloc(0x0, 0x2) 01:42:24 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0045878, &(0x7f00000000c0)=0x2) 01:42:24 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r10, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 344.190874][T11402] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:24 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:24 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0045878, &(0x7f00000000c0)=0x2) 01:42:24 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:24 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000200)={0x1, @sliced={0x2, [0x20, 0x1000, 0x0, 0x7, 0x42, 0x5, 0x4, 0x6, 0x7, 0xeb, 0xa741, 0x4, 0xfffa, 0x2, 0x8, 0x3, 0x1, 0x40, 0x6, 0x2, 0xebaa, 0x100, 0xfa, 0x7f, 0x4, 0x4, 0x6, 0x5b6c, 0x8, 0x9, 0x8, 0x7, 0x4246, 0x9, 0x8001, 0x3, 0x8, 0xffe0, 0x17, 0x0, 0x8, 0x7, 0x1f, 0x6, 0x200, 0x101, 0x63, 0x2], 0x80000001}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:25 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0185500, &(0x7f00000000c0)=0x2) 01:42:25 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) gettid() r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 344.655164][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 344.661336][ T2878] libceph: mon0 (1)[d::]:6789 connect error [ 344.733822][T11424] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:25 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0189436, &(0x7f00000000c0)=0x2) 01:42:25 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000200)={0x1, @sliced={0x2, [0x20, 0x1000, 0x0, 0x7, 0x42, 0x5, 0x4, 0x6, 0x7, 0xeb, 0xa741, 0x4, 0xfffa, 0x2, 0x8, 0x3, 0x1, 0x40, 0x6, 0x2, 0xebaa, 0x100, 0xfa, 0x7f, 0x4, 0x4, 0x6, 0x5b6c, 0x8, 0x9, 0x8, 0x7, 0x4246, 0x9, 0x8001, 0x3, 0x8, 0xffe0, 0x17, 0x0, 0x8, 0x7, 0x1f, 0x6, 0x200, 0x101, 0x63, 0x2], 0x80000001}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:25 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:25 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:25 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:25 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc018aa3f, &(0x7f00000000c0)=0x2) [ 345.232433][T11441] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:25 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0205647, &(0x7f00000000c0)=0x2) 01:42:25 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000200)={0x1, @sliced={0x2, [0x20, 0x1000, 0x0, 0x7, 0x42, 0x5, 0x4, 0x6, 0x7, 0xeb, 0xa741, 0x4, 0xfffa, 0x2, 0x8, 0x3, 0x1, 0x40, 0x6, 0x2, 0xebaa, 0x100, 0xfa, 0x7f, 0x4, 0x4, 0x6, 0x5b6c, 0x8, 0x9, 0x8, 0x7, 0x4246, 0x9, 0x8001, 0x3, 0x8, 0xffe0, 0x17, 0x0, 0x8, 0x7, 0x1f, 0x6, 0x200, 0x101, 0x63, 0x2], 0x80000001}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:26 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0205649, &(0x7f00000000c0)=0x2) 01:42:26 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r7, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:26 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 345.698472][T11458] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:26 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:26 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc020660b, &(0x7f00000000c0)=0x2) 01:42:26 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000200)={0x1, @sliced={0x2, [0x20, 0x1000, 0x0, 0x7, 0x42, 0x5, 0x4, 0x6, 0x7, 0xeb, 0xa741, 0x4, 0xfffa, 0x2, 0x8, 0x3, 0x1, 0x40, 0x6, 0x2, 0xebaa, 0x100, 0xfa, 0x7f, 0x4, 0x4, 0x6, 0x5b6c, 0x8, 0x9, 0x8, 0x7, 0x4246, 0x9, 0x8001, 0x3, 0x8, 0xffe0, 0x17, 0x0, 0x8, 0x7, 0x1f, 0x6, 0x200, 0x101, 0x63, 0x2], 0x80000001}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:26 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:26 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc020aa00, &(0x7f00000000c0)=0x2) [ 346.239260][T11479] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:26 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r7, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:26 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:27 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:27 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0285628, &(0x7f00000000c0)=0x2) 01:42:27 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 346.655707][ T2878] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 346.683026][T11494] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:27 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0285629, &(0x7f00000000c0)=0x2) 01:42:27 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:27 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0505350, &(0x7f00000000c0)=0x2) 01:42:27 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:27 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:27 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0585609, &(0x7f00000000c0)=0x2) [ 347.189646][T11511] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:27 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:27 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:27 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc058560f, &(0x7f00000000c0)=0x2) 01:42:28 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:28 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0585611, &(0x7f00000000c0)=0x2) [ 347.621131][ T2878] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) 01:42:28 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:28 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:28 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc058565d, &(0x7f00000000c0)=0x2) [ 347.950582][T11548] validate_nla: 1 callbacks suppressed [ 347.950593][T11548] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:28 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:28 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0cc5615, &(0x7f00000000c0)=0x2) 01:42:28 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:28 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:28 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 348.374537][T11564] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:28 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x4) 01:42:28 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:28 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:29 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x5) 01:42:29 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 348.665067][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 348.673445][ T2878] libceph: mon0 (1)[d::]:6789 connect error [ 348.739979][T11582] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:29 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:29 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0xc) 01:42:29 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:29 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:29 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0xe) [ 349.208017][T11606] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:29 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:29 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000340)) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:29 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:29 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:30 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 349.615292][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 349.635619][ T2878] libceph: mon0 (1)[d::]:6789 connect error 01:42:30 executing program 0: memfd_create(&(0x7f0000000080)='%\x00', 0x8) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000040)={0x0, 0x7, 0x3, 0xe9, &(0x7f0000ffc000/0x4000)=nil, 0x4}) 01:42:30 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:30 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r10, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:30 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:30 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 01:42:30 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) [ 350.270249][T11648] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:30 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:30 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) gettid() r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:30 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r3 = accept4$inet6(r2, 0x0, &(0x7f0000000080), 0x80800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="ffffffffffffffde280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x5, 0x0, 0x0, 0x2, 0xfffd, 0x4}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@mcast2, 0x7a, r8}) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) 01:42:31 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 350.655296][ T9195] libceph: connect (1)[d::]:6789 error -101 [ 350.675064][ T9195] libceph: mon0 (1)[d::]:6789 connect error [ 350.689428][T11659] device veth3 entered promiscuous mode 01:42:31 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:31 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:31 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:31 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 351.205557][T11681] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:31 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:31 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 351.472727][T11663] device veth3 entered promiscuous mode 01:42:32 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 351.855422][T11691] FS-Cache: Duplicate cookie detected [ 351.860955][T11691] FS-Cache: O-cookie c=0000000062d90c2a [p=00000000f92fde54 fl=222 nc=0 na=1] [ 351.869916][T11691] FS-Cache: O-cookie d=000000003b35edb4 n=000000005a68141c [ 351.877289][T11691] FS-Cache: O-key=[10] '0200020000807f000008' [ 351.883408][T11691] FS-Cache: N-cookie c=0000000088702283 [p=00000000f92fde54 fl=2 nc=0 na=1] [ 351.892187][T11691] FS-Cache: N-cookie d=000000003b35edb4 n=00000000410077cd [ 351.899472][T11691] FS-Cache: N-key=[10] '0200020000807f000008' 01:42:32 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x1c256fed) 01:42:32 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:32 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r7, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 352.199005][T11708] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:32 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:32 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00\x04\x00\x00\b\x00\x00\x00\x00\xff\x00\x80', 0x2, 0x0) r1 = socket$inet(0x2, 0x6, 0xa) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r4, 0xbe, 0x17}, 0x8) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:32 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) [ 352.560006][T11722] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:33 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000100)=0x400) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1ff, 0x303000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0xffffffff, 0x1, 0x4, 0x2, {r2, r3/1000+10000}, {0x5, 0x8, 0x0, 0x7f, 0x1, 0x81, "f4b43f00"}, 0x6c25, 0x1, @fd=r5, 0x4}) 01:42:33 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 352.658009][ T12] libceph: mon1 (1)[::6]:6789 socket error on write 01:42:33 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:33 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r7, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 352.925663][T11740] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:33 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) clock_gettime(0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000100)=""/176) 01:42:33 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:33 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:33 executing program 0: ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0xe, 0x80000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1001, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@privport='privport'}, {@version_9p2000='version=9p2000'}, {@access_any='access=any'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@msize={'msize', 0x3d, 0x3}}, {@privport='privport'}, {@uname={'uname', 0x3d, '/dev/input/mice\x00'}}], [{@dont_hash='dont_hash'}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'selinuxvmnet1:eth1$)'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@hash='hash'}]}}) r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x303000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000080)=0xffff, 0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}}}, 0xa0) 01:42:33 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 353.318265][T11758] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x2, 0x5, 0x4, 0x20000000, {0x0, 0x7530}, {0x3, 0x0, 0x6, 0x5, 0xfb, 0x4, "85eafdf5"}, 0x2000000, 0x3, @planes=&(0x7f0000000080)={0x2, 0x1040, @userptr=0x8, 0x5}, 0x4}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x2) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80800) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000100)={0x4, 0x1, @raw_data=[0x2, 0x22800000, 0x7ff, 0x8, 0x7, 0x1ff, 0x6, 0x100, 0xfff, 0x7, 0x7cf9, 0x81, 0xffffff99, 0xffff0000, 0x4, 0x9]}) 01:42:33 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:33 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:33 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 353.623027][ T12] libceph: mon1 (1)[::6]:6789 socket error on write [ 353.653887][T11772] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:34 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x2) 01:42:34 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:34 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:34 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:34 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r2 = accept(r1, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x5, @loopback, 0xfffffffa}, 0x1c) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:34 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 354.070943][T11792] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:34 executing program 5: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:34 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:34 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:34 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000080)={@empty, @multicast1}, 0x8) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/qelinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0xfffffffe) [ 354.477428][T11812] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:35 executing program 5: io_setup(0xfff, &(0x7f0000000580)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 354.667426][ T12] libceph: connect (1)[d::]:6789 error -101 [ 354.681279][ T12] libceph: mon0 (1)[d::]:6789 connect error 01:42:35 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:35 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400ad", 0xfffffffffffffe81}], 0x1000000000000311) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x11) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x1) 01:42:35 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 354.925980][T11831] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:35 executing program 5: io_setup(0xfff, &(0x7f0000000580)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:35 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:35 executing program 0: ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0xfff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unlinkat(r3, &(0x7f0000000100)='./file0\x00', 0x200) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000000)) 01:42:35 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) [ 355.325230][T11850] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:35 executing program 5: io_setup(0xfff, &(0x7f0000000580)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:36 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) r4 = dup(0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:36 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 355.615385][ T12] libceph: connect (1)[d::]:6789 error -101 [ 355.621404][ T12] libceph: mon0 (1)[d::]:6789 connect error 01:42:36 executing program 5: io_setup(0xfff, &(0x7f0000000580)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 355.776366][T11860] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:36 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 01:42:36 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:36 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) r4 = dup(0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:36 executing program 5: io_setup(0xfff, &(0x7f0000000580)) socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:36 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x2, 0xd9, 0x1, 0x0, 0x5}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) fcntl$getflags(r2, 0x3) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x2) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x2) fcntl$setownex(r3, 0xf, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}) open(&(0x7f0000000200)='./file0\x00', 0x4100, 0xc774d3ba2854d502) [ 356.261177][T11880] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:36 executing program 5: io_setup(0xfff, &(0x7f0000000580)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:37 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) r4 = dup(0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:37 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:37 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70092635529001000"/25], 0xff86) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)={0x5baf561e, 0x2, 0x4, 0xf3cef3e9351e1a93, {0x77359400}, {0x3, 0x0, 0x3, 0x1f, 0x6, 0x2f, "652cc5d4"}, 0x9, 0x2, @fd=r3, 0x4}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000200)={0x36, 0x6, 0x0, {0x5, 0x0, 0xd, 0x0, '/dev/video36\x00'}}, 0x36) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x8, 0x8}) prctl$PR_CAPBSET_READ(0x17, 0x8) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0xff) [ 356.655338][ T12] libceph: connect (1)[d::]:6789 error -101 [ 356.661752][ T12] libceph: mon0 (1)[d::]:6789 connect error [ 356.685412][T11895] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:37 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:37 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x200, 0x5}, 0xc) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) r1 = clone3(&(0x7f0000000300)={0x800000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), 0x4, 0x0, &(0x7f00000001c0)=""/32, 0x20, &(0x7f0000000200)=""/243}, 0x40) waitid(0x5, r1, 0x0, 0x4, &(0x7f0000000340)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0xd00, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000440)={0x4, 0x0, {0x0, 0x0, 0x25f, 0x3, 0x1000}}) 01:42:37 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 01:42:37 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:37 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:37 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 357.111490][T11915] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:37 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:37 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:37 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:37 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:37 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@xdp, &(0x7f00000001c0)=0x80) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x10) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000100)={0x6, 0xa, 0x7, "3820330a90ae9b0083882b5402f286ba43cc30fe5b00247b5c07867a7eea64cd90e9e558360d82ed752522f1afe9c53ffdaeda2b432e7e9309b3c010", 0xd, "6e100f73cf18cf2fb059cc38fc5936b530356cfa7f2345ee4a913456a6a9ce19ccf3304a25a91f8b52b28bc1c5d4814b49487976c458b33dd0d939ce", 0x164}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:38 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:38 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000100)={'security\x00', 0xf5, "7601321e8e0a1b7e38a2012860046b76f1547b87089751bed7a9ab47b99535fe8d487dda8e8488d411654e053ce41e4c743f9603aeb2a400910c7f5b0f274deb72421f278dd6a6497133d5ad317be54fc1907b69ab891ca30f05256f8ee0f15004a0345eef0644783c74adc614c6025a3fb9fc98a65188229489ecfd319418397e649c7412f5ad1cf786c3339160f4c41a5e98abd90d82796ccc8b3026b4c897a45148422c8d66ece81d1f7b54f52d389db735ad19c31866c8166865f77bb8176016ef5ad70f6c77ecbd3f8b0725dea8287ef6e88c5e6cbe2e8e04bbb9481e088f3500fe9997eef90c7c4eb51352bb79a5560da846"}, &(0x7f0000000040)=0x119) 01:42:38 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 01:42:38 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:38 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:38 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) fcntl$setsig(r1, 0xa, 0x1a) 01:42:38 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev\xf5\xef\x01\xe9s\xf3C\xbb\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:38 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:38 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000040)={0x2f800, "5d27fe8e70c024d09bf5aeda572c9d2049096db3c6221752d4b13f922d975b91", 0x0, 0x5c13, 0x40, 0x14, 0x1}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r7, 0x2c}, &(0x7f0000000140)=0x8) recvfrom$rxrpc(r3, &(0x7f0000000280)=""/233, 0xe9, 0x40012060, &(0x7f0000000380)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x24) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r8, @in6={{0xa, 0x4e20, 0x0, @local, 0x4}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) 01:42:39 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:39 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 358.662133][T11986] validate_nla: 3 callbacks suppressed [ 358.662144][T11986] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 358.696948][ T12] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) 01:42:39 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:39 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x2) r2 = socket$inet6(0xa, 0x6, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0xffffffffffffff14) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000001c0)={r2, r3, 0xffff, 0x82, &(0x7f0000000100)="87c4b425948235c4a26a847512b22405de295984176ef398944814a2b699f144d6344ae18b4b2eb1877e3a346ef46f8e4a17a7e5f78c341206941f3ed8ac85f510104c83d30993cc7f3a1f72f8b4d0ac7b8ecc09cfa984453a323986dfc9a8e65110c344a0a3d2d10348c450b6ee23219494b5860402e9b7125020f44e601f1bc10f", 0x2, 0x6, 0x200, 0x8, 0x0, 0x4, 0x98, 'syz1\x00'}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x787b3372) 01:42:39 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:39 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:39 executing program 3: io_setup(0xfff, &(0x7f0000000580)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:39 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000040)=""/219) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x7, 0x800}, {0x2, 0x0, 0x800}, {0x1, 0x5, 0x800}, {0xc210136a1d59ae8a, 0x70, 0x1000}, {0x2, 0x0, 0x800}, {0x4, 0x9, 0x1000}, {0x2, 0x6, 0x1000}, {0x746a83b90c6fa32d, 0xfff}, {0x1, 0x7f, 0x800}], 0x9, &(0x7f0000000180)) [ 359.117376][T12015] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 359.245393][T12005] FS-Cache: Duplicate cookie detected [ 359.250942][T12005] FS-Cache: O-cookie c=00000000bc157ebf [p=00000000f92fde54 fl=222 nc=0 na=1] [ 359.250955][T12005] FS-Cache: O-cookie d=000000003b35edb4 n=0000000019bf72b7 [ 359.250963][T12005] FS-Cache: O-key=[10] '0200020000807f000008' [ 359.251013][T12005] FS-Cache: N-cookie c=00000000f3b602be [p=00000000f92fde54 fl=2 nc=0 na=1] [ 359.282353][T12005] FS-Cache: N-cookie d=000000003b35edb4 n=000000007e208f68 [ 359.289606][T12005] FS-Cache: N-key=[10] '0200020000807f000008' 01:42:39 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:39 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:39 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x9, 0x5, 0x8, 0x1000, 0x400, 0x9, 0xc}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic={0x10000, 0x20, 0x8, 0x3, 0x0, [{0x28, 0x3, 0x4, [], 0xb1}, {0xe5, 0x20, 0xa2, [], 0x2}, {0x13, 0x3, 0x2, [], 0x7f}, {0x0, 0x3, 0x7, [], 0x4}, {0xd4, 0x1f, 0x3f, [], 0x20}, {0x7, 0x7, 0xff, [], 0x2}, {0x0, 0x0, 0xbf, [], 0x4}, {0x1f, 0xd0, 0xd3, [], 0xd0}, {0x9, 0x0, 0x7, [], 0x80}, {0x6, 0x3, 0x8, [], 0xcd}, {0x40, 0x0, 0x1, [], 0x7}, {0x2, 0x7f, 0x1b, [], 0x1d}, {0x1, 0x9d, 0x0, [], 0x2}, {0x4, 0x6, 0xba, [], 0xf7}, {0x7, 0x8, 0x7, [], 0x2}, {0x4, 0x5, 0x40, [], 0x7a}, {0x5, 0x1, 0x9, [], 0x60}, {0xdb, 0x8, 0x81, [], 0xff}, {0x0, 0xff, 0x4, [], 0x9}, {0x7f, 0xc9, 0xfe, [], 0xb2}, {0x1f, 0x0, 0x0, [], 0x11}, {0x9, 0x9, 0x7, [], 0xff}, {0x6, 0x1f, 0x80, [], 0x8}, {0x3f, 0x9, 0xee, [], 0x99}]}}) 01:42:39 executing program 3: io_setup(0xfff, &(0x7f0000000580)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 359.559871][T12037] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:40 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:40 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:42:40 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80c102, 0x0) getuid() 01:42:40 executing program 3: io_setup(0xfff, &(0x7f0000000580)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:40 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:40 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 360.061302][T12057] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:40 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'tunl0\x00'}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0xf46910faa0d1d6bb, 0x400}) 01:42:40 executing program 3: io_setup(0xfff, &(0x7f0000000580)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:40 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:40 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x20280, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000100)={0xa, 0x0, [{0x200, 0x0, 0x80}, {0x7fffffff, 0x0, 0x9}, {0x9, 0x0, 0xfffffffffffffff7}, {0x8, 0x0, 0xd6ad}, {0x9, 0x0, 0xfffffffffffffffe}, {0x20, 0x0, 0x4}, {0xfff, 0x0, 0x3}, {0x1f, 0x0, 0x40}, {0x0, 0x0, 0x1b9}, {0x2, 0x0, 0xc5a}]}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:40 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:40 executing program 3: io_setup(0xfff, &(0x7f0000000580)) socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:41 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x6) [ 360.608123][T12078] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 360.657029][ T12] libceph: mon1 (1)[::6]:6789 socket error on write 01:42:41 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:42:41 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 360.701155][ T12] libceph: connect (1)[d::]:6789 error -101 [ 360.735507][ T12] libceph: mon0 (1)[d::]:6789 connect error 01:42:41 executing program 3: io_setup(0xfff, &(0x7f0000000580)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:41 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:41 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:41 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:41 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 361.159713][T12106] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000300)='\x0fdev/vcsa#\x00', 0x9, 0x343488e12edfcf7c) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x9, 0x8, 0x6, 0xe97, [], [], [], 0xdada, 0x101, 0x20, 0xc00, "a890db3befe3fd0ec1390f420f9f5872"}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = accept4$unix(r2, &(0x7f0000000240), &(0x7f0000000040)=0x6e, 0x800) setsockopt(r3, 0x8, 0x6, &(0x7f00000002c0)="34fcc0ca25734163e333407abbf9f6085f86ac0c434079bd51dc21588f3602fd0d29c00564cc3369abedb2c988", 0x2d) 01:42:41 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:41 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:41 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:42 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 361.625243][ T12] libceph: connect (1)[d::]:6789 error -101 [ 361.636964][ T12] libceph: mon0 (1)[d::]:6789 connect error [ 361.672790][T12126] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:42 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 01:42:42 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:42 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:42 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:42 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:42 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:42 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 362.118375][T12147] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:42 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:42 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000440)={0x0, 0x1, 0xaa, 0x3, 0xede7}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x6ea) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r10, 0x400454ce, r11) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x1080522, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r9, @ANYBLOB="2c67726f75fe5b74085f69643d", @ANYRESDEC=r11, @ANYBLOB="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", @ANYRESDEC=r12, @ANYBLOB=',subj_type=:,euid=', @ANYRESDEC=r14, @ANYBLOB=',smackfsroot=/dev/video36\x00,obj_role=/dev/video36\x00,\x00']) 01:42:42 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:42 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:43 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 362.555827][T12165] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:43 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x800, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) ioctl$FICLONE(r1, 0x40049409, r2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) shutdown(0xffffffffffffffff, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r1, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x5, 0x10000}, {0x1000, 0x400}], r3}, 0x18, 0x1) 01:42:43 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 362.655268][ T12] libceph: connect (1)[d::]:6789 error -101 [ 362.661318][ T12] libceph: mon0 (1)[d::]:6789 connect error 01:42:43 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:43 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:43 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0xfffffff9) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0xbe0, 0x0, 0x2}, 0x1c) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0xc7, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x5}}}}, 0x88) listxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/146, 0x92) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80000, 0x0) 01:42:43 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x0, &(0x7f00007fb000/0x800000)=nil) 01:42:43 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 362.980031][T12192] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:43 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:43 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100)=0xfffffffffffffffc, 0x4) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x4, 0xc90, 0x1}) 01:42:43 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:43 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x0, &(0x7f00007fb000/0x800000)=nil) 01:42:43 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:43 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 01:42:44 executing program 0: ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:44 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:44 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x0, &(0x7f00007fb000/0x800000)=nil) 01:42:44 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:44 executing program 5: getpid() perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)={0x270, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xff1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8bc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff8000}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb44}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2e2}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaef}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4011}, 0x10) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000c40)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESDEC=0x0, @ANYPTR, @ANYRESHEX], @ANYRESOCT, @ANYRESHEX, @ANYRES16]], 0x8) write$cgroup_pid(r6, &(0x7f0000000000), 0x10000000d) 01:42:44 executing program 0: getitimer(0x2, &(0x7f0000000040)) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x261) 01:42:44 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 364.062463][T12239] validate_nla: 1 callbacks suppressed [ 364.062474][T12239] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:44 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:44 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:44 executing program 4: userfaultfd(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)="694912a063c54a46a31d337cb35036674cf03abe9b710988f1067b45", 0x1c}]) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$unix(0x1, 0x5, 0x0) dup2(0xffffffffffffffff, r4) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x80) ioctl$RTC_VL_CLR(r5, 0x7014) io_submit(r3, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x0, 0x5e, "6e61d58112a338fb65369cf4022cdaefdcb7cd91e29ccbcfcd7df6f87111c76f5aa46e943d9d2e2119789d6617c7c85e477aa054c6298327b0f363b16b5d32f39bfbc05343e039b9e19edceb4f5edfafeb5e0585a31978ec2f7a9a381f35"}) socket$l2tp(0x18, 0x1, 0x1) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000), 0x0) 01:42:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x500, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340)="694912a063c54a46a31d337cb35036674cf03abe9b", 0x15}]) socket$unix(0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) io_submit(r2, 0x0, 0x0) 01:42:45 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 364.590078][T12263] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:45 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0xbe0, 0x0, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001340)='/dev/rfkill\x00', 0x8881, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x80000001, 0x0) r9 = perf_event_open$cgroup(&(0x7f00000013c0)={0x2, 0x70, 0x9, 0xf9, 0x7, 0x2, 0x0, 0x8, 0x82030, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000001380), 0x5}, 0x3918, 0x3, 0x5, 0x3, 0x100, 0x2, 0x40}, r7, 0x6, 0xffffffffffffffff, 0x2) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001440)=0x0) r12 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) fstat(r12, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001500)='/dev/vcs\x00', 0x200, 0x0) r15 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r16 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r16, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r17 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001540)='/selinux/context\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001580)) r18 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r18, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) fstat(r18, &(0x7f00000015c0)) r19 = getpid() sched_setscheduler(r19, 0x5, &(0x7f0000000380)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001640)=0x0) getresgid(&(0x7f0000001680), &(0x7f00000016c0)=0x0, &(0x7f0000001700)) r22 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r22, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r23 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r23, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r24 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r24, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r25 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r25, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r26 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r26, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r27 = memfd_create(&(0x7f0000001b80)='cpuset\x00', 0x0) sendmmsg$unix(r1, &(0x7f0000001c40)=[{&(0x7f0000000040)=@abs={0x3, 0x0, 0x4e20}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="b96d1b3be5513d2546badd3fe43707dc43b315d689a935274e5b943b2a41f405fa062d2246985eacbacc9273855b201da2bdb7e3b6f5c02e93abf1a7bb8a332fc2d5d4a038944966f513282f9b54148a", 0x50}, {&(0x7f0000001180)="a5b87dbe1ae7b93d1e9e6e8c15e8dff9c8df924dda08e977fcb49151cb077dbac4f92bf54e8e2811132fb4dca1610d2a630d1aca88f9fbe7e8b037c93f73077701dfc936422c9811e00bc08248515d9f6209295e402aac31131d61d8d156d42a1ef1ad39a4b974703b7693df607e54a12d100aa51f9acae30f25918371e76d0da63b068b46535c9258f4487f06dd519ba6330543a6ba879f251218506449f1ecbbd2c864efd1769740e43e4b0d293e0d22612543c27a92c04ca254b6ec87fc718e3fd7a848e1cc2a2797f5441bb4f4cb01d3e952896c2a329a2c5014a461b279ab68223c8f52a364edca7b876d", 0xed}, {&(0x7f0000001280)="024b577096633dee410afcaac45fa1b59c1f567f28a974aa2688ad3c6ad6571e6b019a8c1018d147f4d16e997193400dc137dff9795c131c99e5a137372d1750b143b3f712bd7c213bb6b7763a163b597f3a3e1512c5418b612b4a52229c7f1ab7a171ebb865bf675ada3acc5223ec97cfdfa1", 0x73}], 0x4, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1800000008000000010000000100070020ad01b1143b93000050626a4276eb5b26a4dabc77e8e67198ed88e22a3946bd3c195b4f465e6ebe7bcbe3946c60c18ed275c4291151435753", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r26, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r27, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r22, @ANYRES32=r0, @ANYRES32=r23, @ANYRES32=r0, @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r0], 0x128}, {&(0x7f0000001880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001900)="f630379db00b8e359e5280795551cfb0d681c036bebd03306a9d91b0", 0x1c}, {&(0x7f0000001940)="94d197180602d3dce9f098fe46d2f505d9d6b6406efa41f204fb218e6c514c7b262c0f90eaafdc614358c8d90064b22c5c91daaa4a0d44e6de6971f115ab43e93f2e8d2c5f8312b880f20725aca09a9a53634a0bad9566babaeffdb58c2c513d5f5d9702ee99edc5b1e5654ac8961e774aaa3f990b1388e40bf33ae58a15b61e40e50c649cf1f5cf0dce940b0380ed15ef71c2aaf82fc3889c688768d73465338a54108a3f7768a045dc7e78bd14e6786ee9c57bc68e75730d825f915d6e31e0424f382f5f53023e58553b", 0xcb}, {&(0x7f0000001a40)="2484913e9da2c5188c5f", 0xa}, {&(0x7f0000001a80)="c79b60a7fb6b5f800b9b86e0b02abcf8ffe9c5e1a8ef93ed54769c5ec892a214f670b48d2f9ccc058d1c345c9d0c742855841494bb32bc82e3fb7c18b6c33445ee91aea567885e120f1e0816e84e85a2396164098463637a2e0fb1c876c1d7d325789f953de901cab9a60ec5cdd3be76e577b0115f33d78b43991dff75a887f31658815e07938d4fc8250380db4e813bfe8ec1de21afaf427eb2d302fe539c0c871abc37a9a03c660ca750dfa11796f98c6024aebdf8759b800acfc476494edc3dbf7681e0d2d9b466d42ed8f4007869802e7169a334a3a2", 0xd8}, {&(0x7f0000001b80)}], 0x5, 0x0, 0xffffffffffffff5b, 0x10}], 0x2, 0x24008810) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 364.700502][ T12] libceph: mon1 (1)[::6]:6789 socket error on write 01:42:45 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:45 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x500, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340)="694912a063c54a46a31d337cb35036674cf03abe9b", 0x15}]) socket$unix(0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) io_submit(r2, 0x0, 0x0) 01:42:45 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 365.108799][T12294] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x4, 0x1, 0x9, 0xc8}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:45 executing program 4: userfaultfd(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)="694912a063c54a46a31d337cb35036674cf03abe9b710988f1067b45", 0x1c}]) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$unix(0x1, 0x5, 0x0) dup2(0xffffffffffffffff, r4) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x80) ioctl$RTC_VL_CLR(r5, 0x7014) io_submit(r3, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x0, 0x5e, "6e61d58112a338fb65369cf4022cdaefdcb7cd91e29ccbcfcd7df6f87111c76f5aa46e943d9d2e2119789d6617c7c85e477aa054c6298327b0f363b16b5d32f39bfbc05343e039b9e19edceb4f5edfafeb5e0585a31978ec2f7a9a381f35"}) socket$l2tp(0x18, 0x1, 0x1) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000), 0x0) 01:42:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x500, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340)="694912a063c54a46a31d337cb35036674cf03abe9b", 0x15}]) socket$unix(0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) io_submit(r2, 0x0, 0x0) 01:42:45 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:45 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:45 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000200)=""/160) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000100)={0x9, @raw_data="1cf0f244b8735aad926e5aacec19543c4cee7f23941cb37496b6a0278865403237799dbe1154a1f0ac116a2de1f21389b08f75c0bd79a6290a5eff30ffd5e89bc2ee64a1efa85777cbd17406b8450e630b43e293addcf9eaa7d16a43e8ea707049c443460d8a023044af3567de98aba3bd0ce9f18071db6e8f6f6f5ae42b0dada568f90d3f4282979d21b101734b64d5f1965a246ddffe015fdab827127ec16ed48695bbb28d183e088f496ece71c9d0921dd0f9b11b84adb33e346f2031f26c78a9a019f15caaf4"}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x1, 0xc, 0x4, 0x842ba0be5431feba, {0x77359400}, {0x3, 0x0, 0x2, 0x4, 0x20, 0x81, "e1dbf5ac"}, 0x8, 0x2, @userptr=0x5, 0x4}) [ 365.641571][T12312] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:46 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:46 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x9, 0xb, 0x1, "fab6a02c2137cd7c227f6f50a82dbd3c1e3e6942192dfdeb8dd5bdc4c3a41913", 0x31363553}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000606096768fe07072b0300370e000a0014000300450201070300001419001a00120002000e00010006000300000000e18dc4661b72", 0x2fd}], 0x1) 01:42:46 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:46 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4c}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) [ 366.013212][T12332] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 01:42:46 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x4) [ 366.110616][T12332] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. 01:42:46 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x1, 0x1}, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @descriptor="d13b5d9a063736af"}}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) splice(r0, 0x0, r4, 0x0, 0x80000001, 0x0) [ 366.228977][T12343] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:46 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:42:46 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x400) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='ifb0\x00') 01:42:46 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:47 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='\x0eg\xc4+\xbb\xf5P4\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:47 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:47 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 366.655605][ T12] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 366.672719][T12367] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 366.701226][ T12] libceph: connect (1)[d::]:6789 error -101 [ 366.766854][ T12] libceph: mon0 (1)[d::]:6789 connect error 01:42:47 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x0, &(0x7f00007fb000/0x800000)=nil) 01:42:47 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:47 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) write$FUSE_POLL(r2, &(0x7f0000000100)={0x18, 0x0, 0x1, {0x7}}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)={r5, 0x0, 0xfff9}, 0x8) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 367.087033][T12381] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:47 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x0, &(0x7f00007fb000/0x800000)=nil) 01:42:47 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:42:47 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x1, 0x1}, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @descriptor="d13b5d9a063736af"}}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) splice(r0, 0x0, r4, 0x0, 0x80000001, 0x0) 01:42:47 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:47 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x0, &(0x7f00007fb000/0x800000)=nil) [ 367.574268][T12407] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:48 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@xdp, &(0x7f00000001c0)=0x80) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x10) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000100)={0x6, 0xa, 0x7, "3820330a90ae9b0083882b5402f286ba43cc30fe5b00247b5c07867a7eea64cd90e9e558360d82ed752522f1afe9c53ffdaeda2b432e7e9309b3c010", 0xd, "6e100f73cf18cf2fb059cc38fc5936b530356cfa7f2345ee4a913456a6a9ce19ccf3304a25a91f8b52b28bc1c5d4814b49487976c458b33dd0d939ce", 0x164}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 367.619484][ T12] libceph: connect (1)[d::]:6789 error -101 [ 367.653943][ T12] libceph: mon0 (1)[d::]:6789 connect error 01:42:48 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:48 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') r1 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') dup2(r0, r1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x2) [ 367.957991][T12416] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:48 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:42:48 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:48 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:48 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:48 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:49 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x1, 0x1}, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @descriptor="d13b5d9a063736af"}}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) splice(r0, 0x0, r4, 0x0, 0x80000001, 0x0) 01:42:49 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000100)={0x1, 0x7fff, 0x7f, 0x8000, 0x0, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x8}, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:49 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 368.655225][ T12] libceph: connect (1)[d::]:6789 error -101 [ 368.661279][ T12] libceph: mon0 (1)[d::]:6789 connect error 01:42:49 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000040)={{0x1, @addr=0xdb1a}, 0x8, 0x9, 0x3}) 01:42:49 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:49 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400002, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/172, 0xac}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000080)=""/59, 0x3b}], 0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f7000092635529001000"/25], 0xff86) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000280)='em1\x00', 0x0, r1) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:49 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r0) 01:42:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:49 executing program 1: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) r3 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x100) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="c29102c8f70000fdd37d7c8a0000000000003a43492b926355290010"], 0xff86) r7 = getuid() getresuid(&(0x7f0000001900), &(0x7f0000001940)=0x0, &(0x7f0000001980)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000019c0)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000001ac0)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000200)='reiserfs\x00', &(0x7f0000000240)='./file0\x00', 0xe3, 0x9, &(0x7f0000001800)=[{&(0x7f0000000280)="a5a8f87d8d0735df2e4117af9aaf9fd2832e14441f125845a5019461ba818ded1890e45a4d385a46262c1a074ad2b57e666b64bc42fd05be053168c3bc49944acdeb8f9d89c53ed56b15e9fa9a8466dda00f1ba7756904486d01a97719068932ef2c8d5a181def6b5270e228617e50134454cac3", 0x74, 0x400}, {&(0x7f0000000340)="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", 0x1000, 0x56f5aa4a}, {&(0x7f0000001340)="6438fd02d148d85b23369ec344eb4be76b4ab67917a26e", 0x17, 0x80000001}, {&(0x7f0000001380)="ad6072e998576cfc2089d6d45c94fa8badef71896de5585ad6c7e1fab3fd38761167898e9bc69219224fd207dad123b7e6d75effaa7c7cde19ae58959c578a5a4bd32d619e75b2ba40aca25b947a3bd58f6365480cc27af5b0020aa81344a2c508cb827b5b11b1cac8cfd412ac", 0x6d, 0x80000001}, {&(0x7f0000001400)="22eb48cee45a861e48084aa3beaba564bcd8facae88d77bccb626427c66640b71414a778a147ca83f3c6efca27eda92926a9eb52ca66fc333a2f0c875cc9ca70309c5ebbd40aefbe2238187e54deb4d6708ab217b1421e29dee06ba979e8a5d182c95adfe8e22fa2c23638a0c16f51073bfcda240c5196323bfd9353697e809585fbbf7987bf10d87eea1cb664fd96fe04b89980d891be0eee6240a54b1c8b3b59de37c7f0eac5fbc6c967dbbbd066c320a5ef2cbc3c0f4ec8bb85979d5a8d4aeeb0e10da2efb4e7643bf67ea6c8c84afd1ef8b5c836ebae6e55fa1f3256050c804b408b6f74ba9889", 0xe9, 0x8}, {&(0x7f0000001500)="e4cf0c8caaeb8fceacadbd7fb4a31c627daccf198c88974d30da2d70f02855ccac0c75cea19bf50327c80d10c3d33ab824cb997309e4e3b94ed110de95e320ef02bccb98a649653124fdf5716f6472a83e4b2f6d194894b75b4d690e00002771c2e4677bf7c94da2fdea1ae9c098eef3f4b83646c6c5aae5428ebc316360dc3026818ab6fba983daa4be8b6007f1f50300bb18dfb81edd0e1756433f12b9", 0x9e, 0x80}, {&(0x7f00000015c0)="46d21939ef95e48c484793d15a9061bff2d175328665391ce541cb25285d81c903c1c6cc3a46d81873797fff88a7d38003662df3839a6fa265a611e780d0e6da00ced086adf7bd6a36a49768abe4f2363f1c1bb66c09caad7109a0d5165fcc08b52436bdf28899b520f8bb97ed865de8c744bd14460d5069af7ba0fba1206759ba0516b18b709aa4d1aac5bbcd643df37f5e729c3a716149ec7365783bce9e5f1e8ede347527a1a59be4b3bed641ba8d07f72cc977edcb752372061b", 0xbc, 0x7}, {&(0x7f0000001680)="88ca65f9e94a5c0bb34cd57de895ab478ed99466fdabccef821fd33d827548a6b58398a318f145cef92bfec62d76a19488b34db11b1cadeb0ee346b452183d23dea008dc2a5f7b5e3b15fba289de7fea988dce4abbfdd2f9aa829cae8a9ed23c1eab6f0b0a9eae9baa0e0a8d248c39f9668da997df547053a30cd93d06bc00f9815d021a042761658a6e3fe0be58", 0x8e, 0x7}, {&(0x7f0000001740)="6fef3d18413ca20025a15cc10189940607504167c50124c7ce7e8b1279c3ee5cd5c6e8e8542a96acb183c955b2a09b9a57605dad9d91d54ebef6fc94585339e5a2f0a37b840450ec61d55891ce91776ec938b4f0e7b08936e8eb0fdd6045f0408a6bf03f68c1d0883ab5b4ac7d1a0a2df3cf421fa88b1813e58673ff79f3bbc69657d2da54e7cb800f5db95751adce1f227766638c04b7f6d04659854b66b9931aad1066a07563f752749706f817bf595967dc59282cda6bad66a731", 0xbc, 0x2066}], 0x400, &(0x7f0000001b00)={[{@replayonly='replayonly'}, {@replayonly='replayonly'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@usrjquota_file='usrjquota=syz'}, {@acl='acl'}], [{@euid_lt={'euid<', r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@uid_lt={'uid<', r11}}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000100)={0x0, r12, 0x7fde}) clock_gettime(0x4, &(0x7f00000001c0)) 01:42:49 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 369.176912][T12469] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:49 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) sendto$inet(r2, &(0x7f0000000100)="a14681c9366ea8164099900d6638f8529f73d0ca9ec6796c8012f17e256cd5a8df0fee80ae7fb158caea9a4ec11e7a56d3a34805534b5a67dca180c96b05096f8f7aac2c692812cc50225b43789956e299cb938ad43565fd3f3e9f311a485345eb75f2f1ad744ffd13fd545c91215d498ba5025602b2c537b8a01eaaa70ee407166573ae899c9fe265c86bd3e618a0d6d24725a0d90e0eb389bf2b19651e7384d57dbffe3d0f10de99805d90b8675d915f00f050ef62e7", 0xb7, 0x80, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) 01:42:49 executing program 1: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) gettid() r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:50 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x1, 0x1}, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @descriptor="d13b5d9a063736af"}}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) splice(r0, 0x0, r4, 0x0, 0x80000001, 0x0) 01:42:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xffffffffb632d52c, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000100)={0x9, r2}) [ 369.635143][ T12] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) 01:42:50 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r10, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 369.751955][T12495] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:50 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 01:42:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000080)) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:50 executing program 1: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:50 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000100)={0x6, 0xff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x1, 0x0, 0x1, "4e59f796091750940d98a86334d08e6bc72d4eab4b58f34ddd63cf93dab370c4", 0x39565559}) [ 370.237319][T12520] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:50 executing program 1: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:50 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) [ 370.592476][T12533] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:51 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x1, 0x1}, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @descriptor="d13b5d9a063736af"}}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:42:51 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) fcntl$getown(r1, 0x9) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) prctl$PR_MCE_KILL_GET(0x22) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="ffffffffffffffde280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={r8, 0xffc0, 0x7c, 0x9, 0x4, 0xff, 0xde}) 01:42:51 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:51 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:51 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:51 executing program 1: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 371.071159][T12543] device veth5 entered promiscuous mode [ 371.097526][T12555] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:51 executing program 3: io_setup(0xfff, &(0x7f0000000580)=0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000400)="5a5560af994c98f92f6adb54f43fd1b23452e1c27fa4ed42f65c5aa1f72a31c31d77f65a25225c9d3d71a3a3b9d72d1faabd5144e89915c3b6fd6fe26306d17f1c0b6bccfafcdf902208a631eccd182cb057c03428c10baf1314fc25a2d28b005eeda5c88a93241217385de68e6f5be35c5212e40cea5389e7e3b5a8342c233db0b87a0ca93a1c688fdfe66d1745edc56ae2ed9fcc7e62620f93aa95c6fa61e03344bb1154400f142a37db2838b4eca8", 0xb0, 0x5, 0x0, 0xb5ce5bcb0a585962, r2}, &(0x7f0000000500)) r3 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000740)) userfaultfd(0x80000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/\xf7\x7f\x00\x00\x044\x00\xb2\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r8, r5) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000240)='fdinfo/4\x00') preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(r10, 0x0, 0x1) fcntl$setsig(r10, 0xa, 0xa) ioctl$RTC_WIE_OFF(r10, 0x7010) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x4000, &(0x7f000057bff0)={0x2, 0x800000000000000, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:51 executing program 1 (fault-call:3 fault-nth:0): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:52 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:52 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 371.696854][ T2878] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 371.723082][T12567] FAULT_INJECTION: forcing a failure. [ 371.723082][T12567] name failslab, interval 1, probability 0, space 0, times 0 [ 371.745175][T12567] CPU: 0 PID: 12567 Comm: syz-executor.1 Not tainted 5.4.0-rc8 #0 [ 371.753028][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.763091][T12567] Call Trace: [ 371.766403][T12567] dump_stack+0x197/0x210 [ 371.770753][T12567] should_fail.cold+0xa/0x15 [ 371.775370][T12567] ? fault_create_debugfs_attr+0x180/0x180 [ 371.781200][T12567] ? ___might_sleep+0x163/0x2c0 [ 371.786100][T12567] __should_failslab+0x121/0x190 [ 371.791061][T12567] should_failslab+0x9/0x14 [ 371.795575][T12567] kmem_cache_alloc+0x2aa/0x710 [ 371.800462][T12567] ? perf_trace_lock+0xeb/0x4c0 [ 371.805336][T12567] ? memset+0x32/0x40 [ 371.809341][T12567] vm_area_dup+0x21/0x170 [ 371.813682][T12567] __split_vma+0xab/0x560 [ 371.818026][T12567] ? find_vma+0x30/0x170 [ 371.822272][T12567] __do_munmap+0x396/0x10f0 [ 371.826869][T12567] ? mark_held_locks+0xf0/0xf0 [ 371.826884][T12567] ? find_held_lock+0x35/0x130 [ 371.826901][T12567] do_munmap+0x31/0x40 [ 371.826917][T12567] mremap_to+0x3b4/0x750 [ 371.826936][T12567] ? move_vma+0x950/0x950 [ 371.826952][T12567] ? __kasan_check_write+0x14/0x20 [ 371.827034][T12567] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 371.827053][T12567] __x64_sys_mremap+0x729/0xb80 [ 371.840629][T12567] ? mremap_to+0x750/0x750 [ 371.840649][T12567] ? fput+0x1b/0x20 [ 371.840668][T12567] ? ksys_write+0x1cf/0x290 [ 371.877544][T12567] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 371.883016][T12567] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 371.883034][T12567] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.883047][T12567] ? do_syscall_64+0x26/0x760 [ 371.883066][T12567] ? lockdep_hardirqs_on+0x421/0x5e0 [ 371.883083][T12567] ? trace_hardirqs_on+0x67/0x240 [ 371.883101][T12567] do_syscall_64+0xfa/0x760 [ 371.883121][T12567] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.914252][T12567] RIP: 0033:0x45a639 [ 371.914268][T12567] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:42:52 executing program 3 (fault-call:3 fault-nth:0): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:52 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x1, 0x1}, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @descriptor="d13b5d9a063736af"}}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) [ 371.914277][T12567] RSP: 002b:00007f49c6f4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 371.914292][T12567] RAX: ffffffffffffffda RBX: 00007f49c6f4dc90 RCX: 000000000045a639 [ 371.914301][T12567] RDX: 0000000000800000 RSI: 0000000000400000 RDI: 00000000203fb000 [ 371.914309][T12567] RBP: 000000000075bf20 R08: 00000000207fb000 R09: 0000000000000000 [ 371.914319][T12567] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f49c6f4e6d4 [ 371.914327][T12567] R13: 00000000004c7218 R14: 00000000004dcb28 R15: 0000000000000004 [ 372.048998][T12576] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 372.062782][T12580] FS-Cache: Duplicate cookie detected [ 372.068392][T12580] FS-Cache: O-cookie c=0000000030969f7c [p=00000000f92fde54 fl=222 nc=0 na=1] [ 372.077421][T12580] FS-Cache: O-cookie d=000000003b35edb4 n=0000000041fa671c [ 372.084631][T12580] FS-Cache: O-key=[10] '0200020000807f000008' [ 372.084682][T12580] FS-Cache: N-cookie c=00000000eb8c6b2a [p=00000000f92fde54 fl=2 nc=0 na=1] [ 372.084692][T12580] FS-Cache: N-cookie d=000000003b35edb4 n=0000000046c25dca [ 372.084698][T12580] FS-Cache: N-key=[10] '0200020000807f000008' [ 372.101088][T12543] device veth5 entered promiscuous mode [ 372.109764][T12583] FAULT_INJECTION: forcing a failure. [ 372.109764][T12583] name failslab, interval 1, probability 0, space 0, times 0 01:42:52 executing program 1 (fault-call:3 fault-nth:1): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote}, 0x1, 0x3, 0x3, 0x3}}, 0x2e) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KDDELIO(r1, 0x4b35, 0x100000000) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x2) [ 372.263863][T12583] CPU: 0 PID: 12583 Comm: syz-executor.3 Not tainted 5.4.0-rc8 #0 [ 372.271727][T12583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.281803][T12583] Call Trace: [ 372.285097][T12583] dump_stack+0x197/0x210 [ 372.289421][T12583] should_fail.cold+0xa/0x15 [ 372.294348][T12583] ? fault_create_debugfs_attr+0x180/0x180 [ 372.300154][T12583] ? ___might_sleep+0x163/0x2c0 [ 372.305086][T12583] __should_failslab+0x121/0x190 [ 372.310011][T12583] should_failslab+0x9/0x14 [ 372.314496][T12583] __kmalloc_track_caller+0x2dc/0x760 [ 372.319856][T12583] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 372.326087][T12583] ? fput_many+0x12c/0x1a0 [ 372.330492][T12583] ? strndup_user+0x77/0xd0 [ 372.334984][T12583] memdup_user+0x26/0xb0 [ 372.339215][T12583] strndup_user+0x77/0xd0 [ 372.343546][T12583] ksys_mount+0x3c/0x150 [ 372.347780][T12583] __x64_sys_mount+0xbe/0x150 [ 372.352448][T12583] do_syscall_64+0xfa/0x760 [ 372.356940][T12583] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.362902][T12583] RIP: 0033:0x45a639 [ 372.366791][T12583] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.386392][T12583] RSP: 002b:00007fab48691c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.395413][T12583] RAX: ffffffffffffffda RBX: 00007fab48691c90 RCX: 000000000045a639 [ 372.403375][T12583] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 372.411340][T12583] RBP: 000000000075bfc8 R08: 000000002000a000 R09: 0000000000000000 [ 372.419304][T12583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fab486926d4 [ 372.427259][T12583] R13: 00000000004c71c0 R14: 00000000004dc948 R15: 0000000000000003 01:42:52 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:52 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) [ 372.461864][T12590] FAULT_INJECTION: forcing a failure. [ 372.461864][T12590] name failslab, interval 1, probability 0, space 0, times 0 [ 372.523798][T12590] CPU: 1 PID: 12590 Comm: syz-executor.1 Not tainted 5.4.0-rc8 #0 [ 372.531656][T12590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.541723][T12590] Call Trace: [ 372.545018][T12590] dump_stack+0x197/0x210 [ 372.545046][T12590] should_fail.cold+0xa/0x15 [ 372.545072][T12590] ? percpu_ref_put_many+0x94/0x190 [ 372.559559][T12590] ? fault_create_debugfs_attr+0x180/0x180 [ 372.565416][T12590] __should_failslab+0x121/0x190 [ 372.565437][T12590] should_failslab+0x9/0x14 [ 372.565450][T12590] kmem_cache_alloc+0x47/0x710 [ 372.565472][T12590] ? percpu_ref_put_many+0xb6/0x190 [ 372.584891][T12590] anon_vma_clone+0xde/0x480 [ 372.589510][T12590] __split_vma+0x17e/0x560 [ 372.593963][T12590] ? find_vma+0x30/0x170 [ 372.598229][T12590] __do_munmap+0x396/0x10f0 [ 372.602751][T12590] ? mark_held_locks+0xf0/0xf0 [ 372.607558][T12590] ? find_held_lock+0x35/0x130 [ 372.612341][T12590] do_munmap+0x31/0x40 [ 372.616431][T12590] mremap_to+0x3b4/0x750 [ 372.620722][T12590] ? move_vma+0x950/0x950 [ 372.625060][T12590] ? __kasan_check_write+0x14/0x20 [ 372.630187][T12590] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 372.635753][T12590] __x64_sys_mremap+0x729/0xb80 [ 372.640626][T12590] ? mremap_to+0x750/0x750 [ 372.645057][T12590] ? fput+0x1b/0x20 [ 372.648876][T12590] ? ksys_write+0x1cf/0x290 [ 372.653392][T12590] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 372.658867][T12590] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 372.664333][T12590] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 01:42:53 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:53 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:53 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000ac0)=""/230, 0xe6}, {&(0x7f00000005c0)=""/186, 0xba}, {&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/66, 0x42}], 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'team_slave_0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f00000000c0)=0x2) [ 372.670404][T12590] ? do_syscall_64+0x26/0x760 [ 372.675093][T12590] ? lockdep_hardirqs_on+0x421/0x5e0 [ 372.680392][T12590] ? trace_hardirqs_on+0x67/0x240 [ 372.685434][T12590] do_syscall_64+0xfa/0x760 [ 372.689955][T12590] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.695852][T12590] RIP: 0033:0x45a639 [ 372.699754][T12590] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.719400][T12590] RSP: 002b:00007f49c6f4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 372.727829][T12590] RAX: ffffffffffffffda RBX: 00007f49c6f4dc90 RCX: 000000000045a639 [ 372.735818][T12590] RDX: 0000000000800000 RSI: 0000000000400000 RDI: 00000000203fb000 [ 372.735827][T12590] RBP: 000000000075bf20 R08: 00000000207fb000 R09: 0000000000000000 [ 372.735835][T12590] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f49c6f4e6d4 [ 372.735842][T12590] R13: 00000000004c7218 R14: 00000000004dcb28 R15: 0000000000000004 01:42:53 executing program 5: perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 372.777834][ T2878] libceph: connect (1)[d::]:6789 error -101 [ 372.783874][ T2878] libceph: mon0 (1)[d::]:6789 connect error [ 372.802037][T12606] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:53 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x1, 0x1}, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @descriptor="d13b5d9a063736af"}}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) 01:42:53 executing program 1 (fault-call:3 fault-nth:2): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:53 executing program 3 (fault-call:3 fault-nth:1): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:53 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:53 executing program 5: perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 373.140542][T12622] FAULT_INJECTION: forcing a failure. [ 373.140542][T12622] name failslab, interval 1, probability 0, space 0, times 0 01:42:53 executing program 0: socket$nl_crypto(0x10, 0x3, 0x15) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc0800) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0)=0x7, 0x4) close(r2) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e1f, 0x3}}, 0x10) splice(r0, 0x0, r2, 0x0, 0x90000001, 0x8) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x6) r4 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000100)={0x7, [0x5, 0x0, 0x2ad9, 0x6, 0xfff, 0x8a, 0x200]}, &(0x7f0000000140)=0x12) [ 373.229178][T12627] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 373.284968][T12622] CPU: 0 PID: 12622 Comm: syz-executor.1 Not tainted 5.4.0-rc8 #0 [ 373.292822][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.292829][T12622] Call Trace: [ 373.292853][T12622] dump_stack+0x197/0x210 [ 373.292879][T12622] should_fail.cold+0xa/0x15 [ 373.292905][T12622] ? percpu_ref_put_many+0x94/0x190 [ 373.292919][T12622] ? fault_create_debugfs_attr+0x180/0x180 [ 373.292941][T12622] __should_failslab+0x121/0x190 [ 373.292959][T12622] should_failslab+0x9/0x14 [ 373.336033][T12622] kmem_cache_alloc+0x47/0x710 [ 373.340814][T12622] ? percpu_ref_put_many+0xb6/0x190 [ 373.346037][T12622] anon_vma_clone+0xde/0x480 [ 373.350637][T12622] __split_vma+0x17e/0x560 [ 373.350655][T12622] ? find_vma+0x30/0x170 [ 373.350672][T12622] __do_munmap+0x40f/0x10f0 [ 373.350692][T12622] ? mark_held_locks+0xf0/0xf0 [ 373.368603][T12622] ? find_held_lock+0x35/0x130 [ 373.373388][T12622] do_munmap+0x31/0x40 [ 373.377476][T12622] mremap_to+0x3b4/0x750 [ 373.381744][T12622] ? move_vma+0x950/0x950 [ 373.386075][T12622] ? __kasan_check_write+0x14/0x20 [ 373.386095][T12622] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 373.386115][T12622] __x64_sys_mremap+0x729/0xb80 [ 373.386137][T12622] ? mremap_to+0x750/0x750 [ 373.386152][T12622] ? fput+0x1b/0x20 [ 373.386165][T12622] ? ksys_write+0x1cf/0x290 [ 373.386184][T12622] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 373.386199][T12622] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 373.386215][T12622] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 01:42:53 executing program 5: perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 373.386233][T12622] ? do_syscall_64+0x26/0x760 [ 373.401733][T12622] ? lockdep_hardirqs_on+0x421/0x5e0 [ 373.401752][T12622] ? trace_hardirqs_on+0x67/0x240 [ 373.401772][T12622] do_syscall_64+0xfa/0x760 [ 373.401791][T12622] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.419954][T12622] RIP: 0033:0x45a639 [ 373.419971][T12622] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:42:53 executing program 5: mkdir(0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 373.419980][T12622] RSP: 002b:00007f49c6f4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 373.419995][T12622] RAX: ffffffffffffffda RBX: 00007f49c6f4dc90 RCX: 000000000045a639 [ 373.420002][T12622] RDX: 0000000000800000 RSI: 0000000000400000 RDI: 00000000203fb000 [ 373.420016][T12622] RBP: 000000000075bf20 R08: 00000000207fb000 R09: 0000000000000000 [ 373.420023][T12622] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f49c6f4e6d4 [ 373.420031][T12622] R13: 00000000004c7218 R14: 00000000004dcb28 R15: 0000000000000004 01:42:54 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x4, 0x7, 0x8, 0x1, 0x1, 0x2, 0x1000}, 0x20) getegid() r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x10001) 01:42:54 executing program 5: mkdir(0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:54 executing program 5: mkdir(0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:54 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) [ 373.746539][T12631] FAULT_INJECTION: forcing a failure. [ 373.746539][T12631] name failslab, interval 1, probability 0, space 0, times 0 [ 373.827374][T12631] CPU: 0 PID: 12631 Comm: syz-executor.3 Not tainted 5.4.0-rc8 #0 [ 373.835231][T12631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.845304][T12631] Call Trace: [ 373.848608][T12631] dump_stack+0x197/0x210 [ 373.853023][T12631] should_fail.cold+0xa/0x15 [ 373.857610][T12631] ? fault_create_debugfs_attr+0x180/0x180 [ 373.863412][T12631] ? ___might_sleep+0x163/0x2c0 [ 373.868299][T12631] __should_failslab+0x121/0x190 [ 373.873272][T12631] should_failslab+0x9/0x14 [ 373.877773][T12631] kmem_cache_alloc_trace+0x2d3/0x790 [ 373.883133][T12631] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 373.889360][T12631] ? _copy_from_user+0x12c/0x1a0 [ 373.894290][T12631] copy_mount_options+0x5c/0x3f0 [ 373.899215][T12631] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 373.905445][T12631] ksys_mount+0xa7/0x150 [ 373.909672][T12631] __x64_sys_mount+0xbe/0x150 [ 373.914339][T12631] do_syscall_64+0xfa/0x760 [ 373.918857][T12631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.924742][T12631] RIP: 0033:0x45a639 [ 373.928642][T12631] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 373.948408][T12631] RSP: 002b:00007fab48691c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 373.956811][T12631] RAX: ffffffffffffffda RBX: 00007fab48691c90 RCX: 000000000045a639 [ 373.964785][T12631] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 373.972742][T12631] RBP: 000000000075bfc8 R08: 000000002000a000 R09: 0000000000000000 [ 373.980701][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fab486926d4 [ 373.988658][T12631] R13: 00000000004c71c0 R14: 00000000004dc948 R15: 0000000000000003 [ 374.035050][T12656] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:54 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:54 executing program 1 (fault-call:3 fault-nth:3): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:54 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x1, 0x1}, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @descriptor="d13b5d9a063736af"}}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) 01:42:54 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0xa2e000, 0x102) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000100)={0x89a1ceb, 0x3, 'client1\x00', 0xffffffff80000000, "2aa7e010610572ec", "eb35f0a87662a5b61ce81cdc46b0df370494e1f3bbc796aa1946411d37bc1a40", 0x8, 0x5}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) syslog(0x2, &(0x7f0000000040)=""/10, 0xa) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000000c0)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7fffffff) [ 374.191051][T12665] FAULT_INJECTION: forcing a failure. [ 374.191051][T12665] name failslab, interval 1, probability 0, space 0, times 0 [ 374.213533][ T26] audit: type=1400 audit(1574214174.641:86): avc: denied { syslog } for pid=12663 comm="syz-executor.0" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 374.272672][T12665] CPU: 0 PID: 12665 Comm: syz-executor.1 Not tainted 5.4.0-rc8 #0 [ 374.280553][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.290627][T12665] Call Trace: [ 374.293941][T12665] dump_stack+0x197/0x210 [ 374.298303][T12665] should_fail.cold+0xa/0x15 [ 374.302913][T12665] ? percpu_ref_put_many+0x94/0x190 [ 374.308139][T12665] ? fault_create_debugfs_attr+0x180/0x180 [ 374.313978][T12665] __should_failslab+0x121/0x190 [ 374.318929][T12665] should_failslab+0x9/0x14 [ 374.318945][T12665] kmem_cache_alloc+0x47/0x710 [ 374.318965][T12665] ? percpu_ref_put_many+0xb6/0x190 [ 374.318990][T12665] anon_vma_clone+0xde/0x480 [ 374.319011][T12665] __split_vma+0x17e/0x560 [ 374.338021][T12665] ? find_vma+0x30/0x170 [ 374.338041][T12665] __do_munmap+0x40f/0x10f0 [ 374.338064][T12665] ? mark_held_locks+0xf0/0xf0 [ 374.338082][T12665] ? find_held_lock+0x35/0x130 [ 374.351217][T12665] do_munmap+0x31/0x40 [ 374.364786][T12665] mremap_to+0x3b4/0x750 [ 374.364811][T12665] ? move_vma+0x950/0x950 [ 374.364828][T12665] ? __kasan_check_write+0x14/0x20 [ 374.364844][T12665] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 374.364863][T12665] __x64_sys_mremap+0x729/0xb80 [ 374.364884][T12665] ? mremap_to+0x750/0x750 [ 374.364903][T12665] ? fput+0x1b/0x20 [ 374.373449][T12665] ? ksys_write+0x1cf/0x290 [ 374.373472][T12665] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 374.373487][T12665] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 374.373507][T12665] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.401677][T12665] ? do_syscall_64+0x26/0x760 01:42:54 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 374.401698][T12665] ? lockdep_hardirqs_on+0x421/0x5e0 [ 374.401717][T12665] ? trace_hardirqs_on+0x67/0x240 [ 374.401737][T12665] do_syscall_64+0xfa/0x760 [ 374.401758][T12665] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.438121][T12665] RIP: 0033:0x45a639 [ 374.438139][T12665] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:42:54 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:54 executing program 1 (fault-call:3 fault-nth:4): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 374.438146][T12665] RSP: 002b:00007f49c6f4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 374.438158][T12665] RAX: ffffffffffffffda RBX: 00007f49c6f4dc90 RCX: 000000000045a639 [ 374.438166][T12665] RDX: 0000000000800000 RSI: 0000000000400000 RDI: 00000000203fb000 [ 374.438174][T12665] RBP: 000000000075bf20 R08: 00000000207fb000 R09: 0000000000000000 [ 374.438183][T12665] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f49c6f4e6d4 [ 374.438199][T12665] R13: 00000000004c7218 R14: 00000000004dcb28 R15: 0000000000000004 01:42:55 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:55 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x0, 0x9, 0x1, r2}) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 374.699474][T12689] FAULT_INJECTION: forcing a failure. [ 374.699474][T12689] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 374.712731][T12689] CPU: 1 PID: 12689 Comm: syz-executor.1 Not tainted 5.4.0-rc8 #0 [ 374.720546][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.730779][T12689] Call Trace: [ 374.733499][T12692] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 374.734093][T12689] dump_stack+0x197/0x210 [ 374.734128][T12689] should_fail.cold+0xa/0x15 [ 374.746644][T12689] ? fault_create_debugfs_attr+0x180/0x180 [ 374.746660][T12689] ? rcu_read_unlock+0x16/0x60 [ 374.746678][T12689] ? find_held_lock+0x35/0x130 [ 374.746703][T12689] should_fail_alloc_page+0x50/0x60 [ 374.746716][T12689] __alloc_pages_nodemask+0x1a1/0x900 [ 374.746730][T12689] ? lock_downgrade+0x920/0x920 [ 374.746746][T12689] ? __alloc_pages_slowpath+0x2920/0x2920 [ 374.746770][T12689] ? rcu_read_unlock+0x33/0x60 [ 374.757160][T12689] cache_grow_begin+0x90/0xd20 [ 374.757181][T12689] ? vm_area_dup+0x21/0x170 [ 374.757196][T12689] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.757215][T12689] kmem_cache_alloc+0x64e/0x710 [ 374.757233][T12689] ? validate_mm+0x382/0x620 [ 374.757252][T12689] vm_area_dup+0x21/0x170 [ 374.757274][T12689] copy_vma+0x3fe/0x8b0 [ 374.766769][T12689] ? rwlock_bug.part.0+0x90/0x90 [ 374.766798][T12689] move_vma+0x28f/0x950 [ 374.766828][T12689] ? move_page_tables+0x21d0/0x21d0 [ 374.766841][T12689] ? vmacache_update+0x114/0x140 [ 374.766855][T12689] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 374.766866][T12689] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.766885][T12689] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.777418][T12689] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.777433][T12689] ? get_unmapped_area+0x2ad/0x3d0 [ 374.777452][T12689] mremap_to+0x66e/0x750 [ 374.777476][T12689] ? move_vma+0x950/0x950 [ 374.777493][T12689] ? __kasan_check_write+0x14/0x20 [ 374.777509][T12689] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 374.777528][T12689] __x64_sys_mremap+0x729/0xb80 01:42:55 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:55 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 374.788096][T12689] ? mremap_to+0x750/0x750 [ 374.788112][T12689] ? fput+0x1b/0x20 [ 374.788127][T12689] ? ksys_write+0x1cf/0x290 [ 374.788149][T12689] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 374.788164][T12689] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 374.788179][T12689] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.788196][T12689] ? do_syscall_64+0x26/0x760 [ 374.788216][T12689] ? lockdep_hardirqs_on+0x421/0x5e0 [ 374.907421][T12689] ? trace_hardirqs_on+0x67/0x240 [ 374.907446][T12689] do_syscall_64+0xfa/0x760 [ 374.907467][T12689] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.907480][T12689] RIP: 0033:0x45a639 [ 374.907497][T12689] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 374.907506][T12689] RSP: 002b:00007f49c6f4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 374.907521][T12689] RAX: ffffffffffffffda RBX: 00007f49c6f4dc90 RCX: 000000000045a639 [ 374.907530][T12689] RDX: 0000000000800000 RSI: 0000000000400000 RDI: 00000000203fb000 [ 374.907544][T12689] RBP: 000000000075bf20 R08: 00000000207fb000 R09: 0000000000000000 [ 374.917610][T12689] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f49c6f4e6d4 [ 374.917620][T12689] R13: 00000000004c7218 R14: 00000000004dcb28 R15: 0000000000000004 01:42:55 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='%fs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:55 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:55 executing program 1 (fault-call:3 fault-nth:5): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:55 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x1, 0x1}, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @descriptor="d13b5d9a063736af"}}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:42:55 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:55 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 375.396774][T12713] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 375.563299][T12728] FS-Cache: Duplicate cookie detected [ 375.568870][T12728] FS-Cache: O-cookie c=0000000088702283 [p=00000000f92fde54 fl=222 nc=0 na=1] [ 375.577796][T12728] FS-Cache: O-cookie d=000000003b35edb4 n=00000000c131f5d3 [ 375.585058][T12728] FS-Cache: O-key=[10] '0200020000807f000008' [ 375.591180][T12728] FS-Cache: N-cookie c=00000000af996103 [p=00000000f92fde54 fl=2 nc=0 na=1] [ 375.599912][T12728] FS-Cache: N-cookie d=000000003b35edb4 n=000000007b87a7a9 01:42:56 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) [ 375.607703][T12728] FS-Cache: N-key=[10] '0200020000807f000008' 01:42:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x40001e, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 375.702388][T12734] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:56 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000100)=0xfffffffffffffeb7) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r7 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x80, 0x0) close(r7) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x80000001, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000140), 0x4) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x1f, 0x33, 0x7, 0x5, 0x14, 0x7f}}, 0x8) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r10, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:56 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:56 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='\\fs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x4003fb, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 376.086576][T12753] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x4007fb, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:56 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x1, 0x1}, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @descriptor="d13b5d9a063736af"}}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) socket$alg(0x26, 0x5, 0x0) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:42:56 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x401e00, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:56 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 376.426548][T12768] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:56 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='n%s\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x401f00, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:57 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) [ 376.647001][T12781] FS-Cache: Duplicate cookie detected [ 376.652527][T12781] FS-Cache: O-cookie c=00000000cd4c0e77 [p=00000000f92fde54 fl=222 nc=0 na=1] [ 376.661555][T12781] FS-Cache: O-cookie d=000000003b35edb4 n=00000000b7259f75 [ 376.668870][T12781] FS-Cache: O-key=[10] '0200020000807f000008' [ 376.675062][T12781] FS-Cache: N-cookie c=00000000b7343e46 [p=00000000f92fde54 fl=2 nc=0 na=1] [ 376.683756][T12781] FS-Cache: N-cookie d=000000003b35edb4 n=000000004ebaaefc [ 376.691036][T12781] FS-Cache: N-key=[10] '0200020000807f000008' 01:42:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x1, @time, 0x1, {0x40, 0x8}, 0x6e, 0x2, 0x3f}) 01:42:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x404000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 376.810432][T12789] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:57 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0x0, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x40fb03, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:57 executing program 0: socketpair$unix(0x1, 0xf, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0)={0x3, 0x0, [{0x5000, 0x53, &(0x7f0000000040)=""/83}, {0x1000, 0x26, &(0x7f0000000100)=""/38}, {0x4000, 0x55, &(0x7f0000000140)=""/85}]}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x2) [ 377.058502][T12790] FS-Cache: Duplicate cookie detected [ 377.064009][T12790] FS-Cache: O-cookie c=00000000cd4c0e77 [p=00000000f92fde54 fl=222 nc=0 na=1] [ 377.073087][T12790] FS-Cache: O-cookie d=000000003b35edb4 n=00000000b7259f75 [ 377.080347][T12790] FS-Cache: O-key=[10] '0200020000807f000008' [ 377.081605][T12802] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 377.086522][T12790] FS-Cache: N-cookie c=000000006e9033ac [p=00000000f92fde54 fl=2 nc=0 na=1] [ 377.086534][T12790] FS-Cache: N-cookie d=000000003b35edb4 n=00000000eb99942b [ 377.086540][T12790] FS-Cache: N-key=[10] '0200020000807f000008' 01:42:57 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x1, 0x1}, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @descriptor="d13b5d9a063736af"}}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:42:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x40fb07, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:57 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x2) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x101, 0x4000) 01:42:57 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:57 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0x0, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:57 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='n.s\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x511000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x20, 0x5, @thr={&(0x7f0000000040)="48e30916fbe583cb0a264f7598d04b8779c80c2ec6d47f953ac4d6981d0757eefa4048cd3344779168770d5572046f685a51b6679e7ac924cd90610481d48ad84ffce1dd279b260879706bece80ffc808d8e1b82897e1be76261d2a7ac616980641b34f83bbe", &(0x7f0000000100)="a34725a6eae4487afaba040615f0845b2662ebe26c028f0dd599372d"}}) lsetxattr$trusted_overlay_origin(&(0x7f0000001540)='./file0\x00', &(0x7f0000001780)='trusted.overlay.origin\x00', &(0x7f00000017c0)='y\x00', 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x40000, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) preadv(r2, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/228, 0xe4}, {&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/69, 0x45}, {&(0x7f00000014c0)=""/68, 0x44}, {&(0x7f0000001540)}, {&(0x7f0000001580)=""/120, 0x78}, {&(0x7f0000001600)=""/153, 0x99}], 0x9, 0x7fd) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 377.614071][T12835] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 377.653351][T12838] FS-Cache: Duplicate cookie detected [ 377.659111][T12838] FS-Cache: O-cookie c=00000000b67cc13e [p=00000000f92fde54 fl=222 nc=0 na=1] [ 377.668066][T12838] FS-Cache: O-cookie d=000000003b35edb4 n=000000009438f4e5 [ 377.675333][T12838] FS-Cache: O-key=[10] '0200020000807f000008' [ 377.681458][T12838] FS-Cache: N-cookie c=0000000093ad4b42 [p=00000000f92fde54 fl=2 nc=0 na=1] [ 377.690253][T12838] FS-Cache: N-cookie d=000000003b35edb4 n=00000000b30ad886 [ 377.697526][T12838] FS-Cache: N-key=[10] '0200020000807f000008' 01:42:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x710000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:58 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0x0, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:58 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x684040) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x5, 0x0, 'client0\x00', 0x80000001, "b2a808b10dd6c9eb", "24ab5b9e62f26f1adc86c11881c482f257f72d01076bbe82f3684de1cb8010f6", 0x2, 0x7fff}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x2) 01:42:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x800000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 378.029409][T12862] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:58 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x1, 0x1}, 0x3c) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:42:58 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='n/s\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31eae2c08f5193a43492b926355290010"], 0xff86) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x3) 01:42:58 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x7fffdfc04000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:58 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x0, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/de\xda\xbf\xef\x87@\xf6\v\xf37\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setns(r2, 0xdd1d36d50e2e8db9) [ 378.487293][T12889] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:42:59 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x21a800, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x10) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x1a, 0x10001, 0x4, r8}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r4, 0x81, 0x8, 0x0, 0x9, 0x69, 0xec9, 0xa3e8, {r9, @in={{0x2, 0x4e20, @loopback}}, 0x9, 0x4, 0x8, 0x7fc, 0x8001}}, &(0x7f0000000200)=0xb0) 01:42:59 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:59 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x0, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:59 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='n\\s\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:59 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, 0x0}, 0x20) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:42:59 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x80001e, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000200)) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100)={0x7, 0x4, 0x1, 0x400}, 0x8) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000280)={0x8, 0x3}) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f0000000240)={0xa, 0x4, 0x7, 0x0, '\x00', 0x8}) write$selinux_context(r1, &(0x7f0000000080)='system_u:object_r:gpg_exec_t:s0\x00', 0x20) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) 01:42:59 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:59 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x0, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:42:59 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x8003fb, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:42:59 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:42:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000100)=0x0) pwrite64(r2, &(0x7f00000001c0)="5ee9efe61a9b3964c6d8e3b9ba94967dbfdecc053fccb2aa8612fc72e4d5295d991f640cd96a804bae33b54f4e12fd6889dd0a9dc3531439166fb6c3a898abdfb78ca62d9969ebf91d21e26c1979c66e06b1ec9145fd79a09221862376222bb31cf5bc60c05ec4f168ce725bcf8e01a89c234692b6375fd2838e653900a6f809b932b3e2abedb8b9e02ed6f581b2bd1df4f65fdbc2366977da", 0x99, 0x2) ioprio_set$uid(0x0, r3, 0x8) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0xffffffff, 0x7, 0x4, 0x4088, {}, {0x0, 0x0, 0x81, 0x7f, 0x9, 0x3, "0ff4d1ca"}, 0x1, 0x3, @userptr=0x81, 0x4}) 01:42:59 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nf#\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:59 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:00 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x8007fb, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:43:00 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 379.785465][T12964] validate_nla: 2 callbacks suppressed [ 379.785476][T12964] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:43:00 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:43:00 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x2) 01:43:00 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x801e00, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:43:00 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:43:00 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:00 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nf%\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:43:00 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x801f00, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 380.179643][T12987] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:43:00 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x2) 01:43:00 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:43:00 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:00 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:43:00 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x804000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 380.544430][T13012] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:43:01 executing program 4: readv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(0xffffffffffffffff, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:43:01 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x100, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x4590a0da0fbcdbba, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000100)={0x5, "b4f30cd4750c6bf0fa33c237b432543c1c15e5c82a211d69319ecedd18610a1b", 0x3c, 0x7, 0x4, 0x8, 0x2}) 01:43:01 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nf*\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:43:01 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:43:01 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x0, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:01 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x80fb03, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 381.141702][T13034] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:43:01 executing program 0: socket$packet(0x11, 0x7, 0x300) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='\x00\nn`\x00\x00d1\x12\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:43:01 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) 01:43:01 executing program 4: readv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(0xffffffffffffffff, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:43:01 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x80fb07, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:43:01 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x0, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x2) 01:43:01 executing program 4: readv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(0xffffffffffffffff, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:43:01 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) 01:43:02 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nf+\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:43:02 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x7fffdf804000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:43:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='\f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x40, 0x4) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r8 = getuid() fsetxattr$security_capability(r7, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{0x2, 0x5}, {0x9, 0x5}], r8}, 0x18, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r10, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd47d5cc31eae2c08f5193a43492b9263552b0010"], 0xff86) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x101180, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@empty, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) ioctl$PPPIOCDISCONN(r10, 0x7439) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@local, @in6=@ipv4={[], [], @multicast1}, 0x4e23, 0x0, 0x4e20, 0x4, 0xa, 0x90, 0x40, 0x73, 0x0, r9}, {0x80000001, 0x7, 0x7, 0xb2a9, 0x2, 0x3, 0x4, 0xb5ac}, {0xffffffff00000000, 0x1, 0x1, 0x6}, 0x2, 0x0, 0x1, 0x65c38513066d631c, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x17}, 0x4d5, 0xff}, 0x2, @in6=@mcast2, 0x3506, 0x3, 0x0, 0x8, 0x10000000, 0xd9, 0x401}}, 0xe8) [ 381.668595][T13073] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:43:02 executing program 4: pipe(0x0) readv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(0xffffffffffffffff, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:43:02 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) 01:43:02 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x0, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:02 executing program 4: pipe(0x0) readv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(0xffffffffffffffff, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:43:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/o36\x00', 0x2, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x9, 0x6, 0x2, 0x3, 0x3, 0x6, 0x200, 0x1f8, 0x40, 0x327, 0x0, 0xc000, 0x38, 0x1, 0x438f, 0x6, 0x8000}, [{0x6, 0x1, 0x7, 0x0, 0x2, 0x7f, 0x5, 0x20}], "0c3b7edfc697174157a09d28b0a09c7db08dafbb38ee8405a619aa93ea5b709ed88ce8bc88f9e3c080cd2374708ac10b632e613b18aec3302d841b36ecb02b0bfa2a179136f029ae0527452be74403b4eac50fb7fa0d7c8fdd95041beb14c56245033da0c841b322b9392822ca940f7a07f361f4776e250d1851c762f03f5a346aa94e67bd2ae55153227baa4456dc305000180fbf49a99efb2bc66f379dc172c49bf8248ad46055fb6d6d901c423ca89da54dc1b4a127ec63b2fe7d6d5ccc2d9304", [[], [], [], [], [], [], []]}, 0x83a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) connect$packet(r1, &(0x7f0000000100)={0x11, 0xc5f4014964ffd293, r6, 0x1, 0x7, 0x6, @dev={[], 0x1a}}, 0x14) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:43:02 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x7ffffffff000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:43:02 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) 01:43:02 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nf-\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:43:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0xa01, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 01:43:02 executing program 4: pipe(0x0) readv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(0xffffffffffffffff, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) [ 382.301213][T13116] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:43:02 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) 01:43:02 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(r0, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:43:03 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x2, &(0x7f00007fb000/0x800000)=nil) 01:43:03 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:03 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) 01:43:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) 01:43:03 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x4, &(0x7f00007fb000/0x800000)=nil) [ 382.842075][T13148] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:43:03 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nf.\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:43:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000100)=0x2) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x40004, 0x8, 0x3}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0x5, 0x2, 0x300d, 0x5, 0x4e0348b8f152be50, 0xe}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x42, 0x0) getpeername$netrom(r1, &(0x7f0000000140)={{0x3, @bcast}, [@default, @netrom, @null, @null, @remote, @default, @remote, @rose]}, &(0x7f0000000080)=0x48) 01:43:03 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:03 executing program 5 (fault-call:2 fault-nth:0): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:43:03 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000000002, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f0000050000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c7c000/0x2000)=nil) [ 383.191193][T13168] FAULT_INJECTION: forcing a failure. [ 383.191193][T13168] name failslab, interval 1, probability 0, space 0, times 0 [ 383.329729][T13168] CPU: 1 PID: 13168 Comm: syz-executor.5 Not tainted 5.4.0-rc8 #0 [ 383.337604][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.343610][T13178] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 383.347668][T13168] Call Trace: [ 383.347696][T13168] dump_stack+0x197/0x210 [ 383.347724][T13168] should_fail.cold+0xa/0x15 [ 383.347744][T13168] ? fault_create_debugfs_attr+0x180/0x180 [ 383.347763][T13168] ? ___might_sleep+0x163/0x2c0 [ 383.347787][T13168] __should_failslab+0x121/0x190 [ 383.383804][T13168] should_failslab+0x9/0x14 [ 383.388315][T13168] __kmalloc_track_caller+0x2dc/0x760 [ 383.393673][T13168] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 383.399902][T13168] ? fput_many+0x12c/0x1a0 [ 383.404310][T13168] ? strndup_user+0x77/0xd0 [ 383.408805][T13168] memdup_user+0x26/0xb0 [ 383.413036][T13168] strndup_user+0x77/0xd0 [ 383.417355][T13168] ksys_mount+0x3c/0x150 [ 383.421590][T13168] __x64_sys_mount+0xbe/0x150 [ 383.426288][T13168] do_syscall_64+0xfa/0x760 [ 383.430785][T13168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 383.436661][T13168] RIP: 0033:0x45a639 [ 383.440547][T13168] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 383.460224][T13168] RSP: 002b:00007f536d680c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 383.468623][T13168] RAX: ffffffffffffffda RBX: 00007f536d680c90 RCX: 000000000045a639 01:43:03 executing program 0: r0 = socket$inet6(0xa, 0x4, 0x1f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/de\x00/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x2) [ 383.476578][T13168] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 383.484563][T13168] RBP: 000000000075bf20 R08: 000000002000a000 R09: 0000000000000000 [ 383.492522][T13168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f536d6816d4 [ 383.500484][T13168] R13: 00000000004c71c0 R14: 00000000004dc948 R15: 0000000000000003 01:43:04 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(r0, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:43:04 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) pidfd_send_signal(r1, 0x3c, &(0x7f0000000000)={0x29, 0x6, 0x1}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) dup(r0) 01:43:04 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x200]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:04 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nf/\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:43:04 executing program 5 (fault-call:2 fault-nth:1): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 383.806808][T13199] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:43:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x201, 0x0) getsockname$ax25(r1, &(0x7f0000000100)={{}, [@bcast, @bcast, @netrom, @netrom, @default, @null, @rose, @netrom]}, &(0x7f0000000080)=0x48) 01:43:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) sched_setparam(r1, &(0x7f0000000040)=0x3ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:43:04 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x0, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) [ 384.153806][T13221] FAULT_INJECTION: forcing a failure. [ 384.153806][T13221] name failslab, interval 1, probability 0, space 0, times 0 [ 384.172047][T13221] CPU: 1 PID: 13221 Comm: syz-executor.5 Not tainted 5.4.0-rc8 #0 [ 384.179907][T13221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.189974][T13221] Call Trace: [ 384.193291][T13221] dump_stack+0x197/0x210 [ 384.194395][T13222] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 384.197985][T13221] should_fail.cold+0xa/0x15 [ 384.198017][T13221] ? fault_create_debugfs_attr+0x180/0x180 [ 384.198043][T13221] ? ___might_sleep+0x163/0x2c0 [ 384.198064][T13221] __should_failslab+0x121/0x190 [ 384.198084][T13221] should_failslab+0x9/0x14 [ 384.226476][T13221] kmem_cache_alloc_trace+0x2d3/0x790 [ 384.226497][T13221] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 384.226512][T13221] ? _copy_from_user+0x12c/0x1a0 [ 384.226534][T13221] copy_mount_options+0x5c/0x3f0 [ 384.226547][T13221] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 384.226566][T13221] ksys_mount+0xa7/0x150 [ 384.226583][T13221] __x64_sys_mount+0xbe/0x150 [ 384.226605][T13221] do_syscall_64+0xfa/0x760 [ 384.272043][T13221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 384.277922][T13221] RIP: 0033:0x45a639 [ 384.281806][T13221] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:43:04 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) sendto$inet(r1, &(0x7f0000000040)="e661286b28ac3ca8800dc0a82971fedda91ff0fea622fc2441b532a09d9d41d1d07298db513f453680c81f480a74dd138d5d68800aa7", 0x36, 0x4010, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x9}, 0x10) ioctl$BLKRRPART(r1, 0x125f, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:43:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/]\x1e\x00\r\x00\x00 \x00g36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='security.SMACK64EXEC\x00', &(0x7f0000000200)='}@\x00', 0x3, 0x1) truncate(&(0x7f0000000080)='./file0\x00', 0x5) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) mq_timedsend(r1, &(0x7f0000000100)="7fd69810a9519d25ad81811e31451753fd4801995d853ba8a2fc395839134c4c2fab627e6d9977968716a14793a06bdd58e303b48e01ebbaddc8bbf9378633a06dab11dde4262036f303a01670a3ec0e788843a618975654ecc3fe747da06e016cf2f3a5672699103e91e751997ce7ae9ba1d1ffad37bff7a26030cb3bfd80d12a8cd366a5665e4ec39c687c009cb48b45d27117aeaf484442aa2afdfd8c99478e4524e8b1c56abe6a2299dc80", 0xad, 0xdd4, 0x0) [ 384.301404][T13221] RSP: 002b:00007f536d680c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 384.309810][T13221] RAX: ffffffffffffffda RBX: 00007f536d680c90 RCX: 000000000045a639 [ 384.317773][T13221] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 384.325736][T13221] RBP: 000000000075bf20 R08: 000000002000a000 R09: 0000000000000000 [ 384.333712][T13221] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f536d6816d4 [ 384.341678][T13221] R13: 00000000004c71c0 R14: 00000000004dc948 R15: 0000000000000003 01:43:04 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nf0\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:43:04 executing program 5 (fault-call:2 fault-nth:2): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:43:05 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/156, 0x9c}], 0x1) write(r0, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:43:05 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x0, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:05 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) recvfrom$x25(r0, &(0x7f0000000100)=""/190, 0xbe, 0x40000150, &(0x7f0000000080)={0x9, @remote={[], 0x2}}, 0x12) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x28, &(0x7f0000000200)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r4, 0x400, 0x8}, 0xc) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x800, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000300)=@req={0x3, 0x48c, 0x800, 0x1}, 0x10) ioctl$TCSETA(r2, 0x5406, &(0x7f00000001c0)={0x8001, 0xfffa, 0x5d89, 0x5, 0xa, 0x4, 0x1e, 0x2, 0x1, 0x4}) [ 384.706523][T13243] FAULT_INJECTION: forcing a failure. [ 384.706523][T13243] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 384.719774][T13243] CPU: 0 PID: 13243 Comm: syz-executor.5 Not tainted 5.4.0-rc8 #0 [ 384.727589][T13243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.737835][T13243] Call Trace: [ 384.741172][T13243] dump_stack+0x197/0x210 [ 384.745536][T13243] should_fail.cold+0xa/0x15 [ 384.750240][T13243] ? fault_create_debugfs_attr+0x180/0x180 [ 384.756181][T13243] ? perf_trace_lock+0xeb/0x4c0 [ 384.761064][T13243] ? __kasan_check_read+0x11/0x20 [ 384.766120][T13243] should_fail_alloc_page+0x50/0x60 [ 384.771598][T13243] __alloc_pages_nodemask+0x1a1/0x900 [ 384.776992][T13243] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 384.782820][T13243] ? __alloc_pages_slowpath+0x2920/0x2920 [ 384.788550][T13243] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 384.788577][T13243] ? fault_create_debugfs_attr+0x180/0x180 [ 384.788595][T13243] cache_grow_begin+0x90/0xd20 [ 384.788612][T13243] ? copy_mount_options+0x5c/0x3f0 [ 384.788628][T13243] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 384.788646][T13243] kmem_cache_alloc_trace+0x6b3/0x790 [ 384.788673][T13243] copy_mount_options+0x5c/0x3f0 [ 384.788685][T13243] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 384.788702][T13243] ksys_mount+0xa7/0x150 [ 384.788722][T13243] __x64_sys_mount+0xbe/0x150 [ 384.804911][T13243] do_syscall_64+0xfa/0x760 [ 384.804934][T13243] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 384.804947][T13243] RIP: 0033:0x45a639 [ 384.804962][T13243] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 384.804969][T13243] RSP: 002b:00007f536d680c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 384.804982][T13243] RAX: ffffffffffffffda RBX: 00007f536d680c90 RCX: 000000000045a639 [ 384.804990][T13243] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 384.804998][T13243] RBP: 000000000075bf20 R08: 000000002000a000 R09: 0000000000000000 [ 384.805006][T13243] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f536d6816d4 [ 384.805015][T13243] R13: 00000000004c71c0 R14: 00000000004dc948 R15: 0000000000000003 [ 384.843781][T13243] FS-Cache: Duplicate cookie detected [ 384.930544][T13243] FS-Cache: O-cookie c=00000000779e15c9 [p=00000000f92fde54 fl=222 nc=0 na=1] [ 384.939451][T13243] FS-Cache: O-cookie d=000000003b35edb4 n=00000000fffb50eb [ 384.939459][T13243] FS-Cache: O-key=[10] '0200020000807f000008' 01:43:05 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="6556ed98cb43c92184f6b6c1899c507d", 0x10, 0x7}], 0x4580, &(0x7f0000000140)={[{@inode64='inode64'}, {@barrier='barrier'}, {@qnoenforce='qnoenforce'}, {@pqnoenforce='pqnoenforce'}, {@pquota='pquota'}, {@prjquota='prjquota'}, {@noikeep='noikeep'}, {@attr2='attr2'}, {@gquota='gquota'}], [{@uid_gt={'uid>', r2}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '/dev/nullb0\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/nullb0\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'nodev}'}}, {@seclabel='seclabel'}]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 384.939505][T13243] FS-Cache: N-cookie c=000000004ce704f7 [p=00000000f92fde54 fl=2 nc=0 na=1] [ 384.961489][T13243] FS-Cache: N-cookie d=000000003b35edb4 n=0000000055e85676 [ 384.968747][T13243] FS-Cache: N-key=[10] '0200020000807f000008' 01:43:05 executing program 0: r0 = socket$inet6(0xa, 0x80000, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x7}, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x2) 01:43:05 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f0000705000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000dc2000/0x1000)=nil) [ 385.014211][ T26] audit: type=1400 audit(1574214185.441:87): avc: denied { map } for pid=13255 comm="syz-executor.1" path="socket:[50557]" dev="sockfs" ino=50557 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_dgram_socket permissive=1 01:43:05 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x5, 0x0, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:05 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfX\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:43:05 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x20010, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc31e161d00"/25], 0xff86) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:43:05 executing program 5 (fault-call:2 fault-nth:3): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:43:05 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) rt_sigsuspend(&(0x7f0000000040)={0x1}, 0x8) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 385.467635][T13281] validate_nla: 1 callbacks suppressed [ 385.467646][T13281] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:43:06 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:43:06 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x503100, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x3, r3}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) fcntl$getflags(r4, 0x400) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 385.687366][T13298] FAULT_INJECTION: forcing a failure. [ 385.687366][T13298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 385.700633][T13298] CPU: 1 PID: 13298 Comm: syz-executor.5 Not tainted 5.4.0-rc8 #0 [ 385.708474][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.718537][T13298] Call Trace: [ 385.721829][T13298] dump_stack+0x197/0x210 [ 385.726154][T13298] should_fail.cold+0xa/0x15 [ 385.730737][T13298] ? fault_create_debugfs_attr+0x180/0x180 [ 385.736530][T13298] ? perf_trace_lock+0xeb/0x4c0 [ 385.741385][T13298] ? __kasan_check_read+0x11/0x20 [ 385.746402][T13298] should_fail_alloc_page+0x50/0x60 [ 385.751585][T13298] __alloc_pages_nodemask+0x1a1/0x900 [ 385.756952][T13298] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 385.762591][T13298] ? __alloc_pages_slowpath+0x2920/0x2920 [ 385.768294][T13298] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 385.774273][T13298] ? fault_create_debugfs_attr+0x180/0x180 [ 385.780074][T13298] cache_grow_begin+0x90/0xd20 [ 385.784825][T13298] ? getname_flags+0xd6/0x5b0 [ 385.789495][T13298] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 385.795722][T13298] kmem_cache_alloc+0x64e/0x710 [ 385.800566][T13298] getname_flags+0xd6/0x5b0 [ 385.805058][T13298] user_path_at_empty+0x2f/0x50 [ 385.809896][T13298] do_mount+0x150/0x1b60 [ 385.814127][T13298] ? copy_mount_string+0x40/0x40 [ 385.819087][T13298] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 385.825340][T13298] ? _copy_from_user+0x12c/0x1a0 [ 385.830283][T13298] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 385.836518][T13298] ? copy_mount_options+0x2e8/0x3f0 [ 385.841716][T13298] ksys_mount+0xdb/0x150 [ 385.845950][T13298] __x64_sys_mount+0xbe/0x150 [ 385.850615][T13298] do_syscall_64+0xfa/0x760 [ 385.855103][T13298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 385.861082][T13298] RIP: 0033:0x45a639 [ 385.864961][T13298] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:43:06 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x0, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) [ 385.884577][T13298] RSP: 002b:00007f536d680c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 385.892982][T13298] RAX: ffffffffffffffda RBX: 00007f536d680c90 RCX: 000000000045a639 [ 385.900965][T13298] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 385.908938][T13298] RBP: 000000000075bf20 R08: 000000002000a000 R09: 0000000000000000 [ 385.916905][T13298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f536d6816d4 [ 385.924862][T13298] R13: 00000000004c71c0 R14: 00000000004dc948 R15: 0000000000000003 01:43:06 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nf\\\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 386.051610][T13308] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 386.170663][T13316] FS-Cache: Duplicate cookie detected [ 386.176256][T13316] FS-Cache: O-cookie c=00000000b7343e46 [p=00000000f92fde54 fl=222 nc=0 na=1] [ 386.185189][T13316] FS-Cache: O-cookie d=000000003b35edb4 n=000000008b8106a8 [ 386.185197][T13316] FS-Cache: O-key=[10] '0200020000807f000008' [ 386.185244][T13316] FS-Cache: N-cookie c=00000000af996103 [p=00000000f92fde54 fl=2 nc=0 na=1] [ 386.185254][T13316] FS-Cache: N-cookie d=000000003b35edb4 n=000000008c6d36ac [ 386.185260][T13316] FS-Cache: N-key=[10] '0200020000807f000008' 01:43:06 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x0, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:06 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x10, 0x6) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x0, 0xffffffff, 0x2, {0x2, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x9, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 01:43:06 executing program 5 (fault-call:2 fault-nth:4): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:43:06 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='teql0\x00') sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 386.459359][T13326] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:43:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 01:43:07 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x9134, 0x0, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:07 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfc\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:43:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 386.819755][T13343] FAULT_INJECTION: forcing a failure. [ 386.819755][T13343] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 386.833015][T13343] CPU: 1 PID: 13343 Comm: syz-executor.5 Not tainted 5.4.0-rc8 #0 [ 386.834972][T13348] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 386.840820][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.840829][T13343] Call Trace: [ 386.840855][T13343] dump_stack+0x197/0x210 [ 386.840885][T13343] should_fail.cold+0xa/0x15 [ 386.871566][T13343] ? fault_create_debugfs_attr+0x180/0x180 [ 386.877392][T13343] ? perf_trace_lock+0xeb/0x4c0 [ 386.877409][T13343] ? __kasan_check_read+0x11/0x20 [ 386.877433][T13343] should_fail_alloc_page+0x50/0x60 [ 386.877447][T13343] __alloc_pages_nodemask+0x1a1/0x900 [ 386.877461][T13343] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 386.877478][T13343] ? __alloc_pages_slowpath+0x2920/0x2920 [ 386.877492][T13343] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 386.877517][T13343] ? fault_create_debugfs_attr+0x180/0x180 [ 386.887539][T13343] cache_grow_begin+0x90/0xd20 [ 386.887559][T13343] ? getname_flags+0xd6/0x5b0 [ 386.887574][T13343] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.887591][T13343] kmem_cache_alloc+0x64e/0x710 [ 386.887618][T13343] getname_flags+0xd6/0x5b0 [ 386.887643][T13343] user_path_at_empty+0x2f/0x50 [ 386.898792][T13343] do_mount+0x150/0x1b60 [ 386.898814][T13343] ? copy_mount_string+0x40/0x40 [ 386.898838][T13343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 386.898852][T13343] ? copy_mount_options+0x2e8/0x3f0 [ 386.898872][T13343] ksys_mount+0xdb/0x150 [ 386.898896][T13343] __x64_sys_mount+0xbe/0x150 [ 386.921793][T13343] do_syscall_64+0xfa/0x760 [ 386.921816][T13343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 386.921829][T13343] RIP: 0033:0x45a639 [ 386.921849][T13343] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:43:07 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) [ 386.937495][T13343] RSP: 002b:00007f536d680c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 386.937512][T13343] RAX: ffffffffffffffda RBX: 00007f536d680c90 RCX: 000000000045a639 [ 386.937521][T13343] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 386.937531][T13343] RBP: 000000000075bf20 R08: 000000002000a000 R09: 0000000000000000 [ 386.937540][T13343] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f536d6816d4 [ 386.937549][T13343] R13: 00000000004c71c0 R14: 00000000004dc948 R15: 0000000000000003 [ 387.016882][T13343] FS-Cache: Duplicate cookie detected 01:43:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x2) [ 387.056906][T13343] FS-Cache: O-cookie c=00000000cd4c0e77 [p=00000000f92fde54 fl=222 nc=0 na=1] [ 387.056915][T13343] FS-Cache: O-cookie d=000000003b35edb4 n=00000000ed340088 [ 387.056927][T13343] FS-Cache: O-key=[10] '0200020000807f000008' [ 387.079201][T13343] FS-Cache: N-cookie c=000000006e9033ac [p=00000000f92fde54 fl=2 nc=0 na=1] [ 387.079211][T13343] FS-Cache: N-cookie d=000000003b35edb4 n=000000008d0e0b05 [ 387.079217][T13343] FS-Cache: N-key=[10] '0200020000807f000008' 01:43:07 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0xdcf38000) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x80, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @loopback, 0x9}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, @in6={0xa, 0x4e20, 0x0, @mcast1, 0x4}, @in6={0xa, 0x4e24, 0x7, @local, 0x49c}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f00000000c0)="165dd1eb6c77b3492ca66171cd54ac5c064f92e4ff414324b4e80f977bb6a5c2eb533d733f9f7e82c3703263eb6eb91e5dc1ff3cabe6e72816468e85bb5079a641965d7b2d4262dbd56544e8150165344fe788b4964d4d14cf1450fde4960c58c21d222ff7c00b60279170d64331dd7e68abc85198f90b718e9809e4072f04b210aac63ce83eb6dbe17f46a8fd4f414d0edd15316238558277563c56344f14fb898a374490", 0xa5) 01:43:07 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfd\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:43:07 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x0, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) 01:43:07 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400200, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50ea62e51e1bad7e, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000140)=r5) getgroups(0x4, &(0x7f0000000080)=[0xee01, r2, 0xee00, 0xee00]) ioctl$TUNSETGROUP(r0, 0x400454ce, r6) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f00000000c0)=0x4) [ 387.492726][T13375] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:43:08 executing program 5 (fault-call:2 fault-nth:5): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:43:08 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20000050, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000bd9906c1fa54ec96", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x420200, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r4, 0xffffffff, 0x8, 0x6}, &(0x7f0000000040)=0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0xffffffffffffffdd) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000400)="a7014de8128a8020a268e0322a24470bfeda613dc41c4c7d5bfd4f19b011999ed19a87188c75a753221cd4c02eb2f8e3e988371a911b9b95104982d06ef73a2f439c83e5dfaf39cb5824f39f52c7f5b818cf7952d9743eb79df7310b166d4c764d6eb13ed87082c2a67698674b4d99db14665aef2fcb1b1b4aad0aa89a84370a54f6df5a232871adb7396ffde04a1e0969", 0x91}, {&(0x7f00000004c0)="0243d20da443458feea74942a4657d959e2763dba67fd1e593328a07abe6571a486d7d", 0x23}], 0x2, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x40080) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) r6 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xca7, 0x200) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000180)=""/112) 01:43:08 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x0, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) [ 387.709814][T13389] FAULT_INJECTION: forcing a failure. [ 387.709814][T13389] name failslab, interval 1, probability 0, space 0, times 0 [ 387.727753][T13389] CPU: 0 PID: 13389 Comm: syz-executor.5 Not tainted 5.4.0-rc8 #0 [ 387.735615][T13389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.745679][T13389] Call Trace: [ 387.745708][T13389] dump_stack+0x197/0x210 [ 387.745735][T13389] should_fail.cold+0xa/0x15 [ 387.745753][T13389] ? fault_create_debugfs_attr+0x180/0x180 [ 387.745773][T13389] ? ___might_sleep+0x163/0x2c0 [ 387.745801][T13389] __should_failslab+0x121/0x190 [ 387.745820][T13389] should_failslab+0x9/0x14 [ 387.745836][T13389] __kmalloc+0x2e0/0x770 [ 387.745853][T13389] ? __kasan_check_read+0x11/0x20 [ 387.745873][T13389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.793836][T13389] ? tomoyo_encode2.part.0+0xf5/0x400 [ 387.793859][T13389] tomoyo_encode2.part.0+0xf5/0x400 [ 387.793876][T13389] ? __kasan_check_read+0x11/0x20 [ 387.793895][T13389] tomoyo_encode+0x2b/0x50 [ 387.813964][T13389] tomoyo_mount_acl+0xe0/0x840 [ 387.818732][T13389] ? avc_has_perm+0x376/0x610 [ 387.823404][T13389] ? __kasan_check_read+0x11/0x20 [ 387.828412][T13389] ? mark_lock+0xc2/0x1220 [ 387.832819][T13389] ? avc_has_perm+0x376/0x610 [ 387.837481][T13389] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 387.843154][T13389] ? __kasan_check_read+0x11/0x20 [ 387.848225][T13389] ? __lock_acquire+0x8a0/0x4a00 [ 387.853161][T13389] ? lock_downgrade+0x920/0x920 [ 387.858013][T13389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.864257][T13389] ? lock_acquire+0x190/0x410 [ 387.868920][T13389] ? tomoyo_mount_permission+0x10a/0x410 [ 387.874631][T13389] tomoyo_mount_permission+0x16a/0x410 [ 387.880094][T13389] ? tomoyo_mount_permission+0x10a/0x410 [ 387.885731][T13389] ? tomoyo_mount_acl+0x840/0x840 [ 387.890741][T13389] ? inode_has_perm+0x1b0/0x230 [ 387.895586][T13389] ? selinux_inode_getattr+0x1c0/0x1c0 [ 387.901208][T13389] ? strncpy_from_user+0x2b4/0x400 [ 387.906428][T13389] tomoyo_sb_mount+0x35/0x40 [ 387.911028][T13389] security_sb_mount+0x87/0xd0 [ 387.916753][T13389] do_mount+0x1d4/0x1b60 [ 387.920997][T13389] ? copy_mount_string+0x40/0x40 [ 387.925934][T13389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.932165][T13389] ? copy_mount_options+0x2e8/0x3f0 [ 387.937374][T13389] ksys_mount+0xdb/0x150 [ 387.941607][T13389] __x64_sys_mount+0xbe/0x150 [ 387.946292][T13389] do_syscall_64+0xfa/0x760 [ 387.950786][T13389] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 387.956662][T13389] RIP: 0033:0x45a639 [ 387.960580][T13389] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 387.980190][T13389] RSP: 002b:00007f536d680c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 387.988606][T13389] RAX: ffffffffffffffda RBX: 00007f536d680c90 RCX: 000000000045a639 [ 387.996567][T13389] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 388.004536][T13389] RBP: 000000000075bf20 R08: 000000002000a000 R09: 0000000000000000 [ 388.012504][T13389] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f536d6816d4 [ 388.020472][T13389] R13: 00000000004c71c0 R14: 00000000004dc948 R15: 0000000000000003 01:43:08 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f000031d000/0x2000)=nil, 0x2000, 0x200000e, 0x13, r0, 0x6858e000) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0xb8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x2, &(0x7f00007fb000/0x800000)=nil) 01:43:08 executing program 5 (fault-call:2 fault-nth:6): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:43:08 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) 01:43:08 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x100000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfi\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 388.145231][T13393] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 01:43:08 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r4, 0x5}, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfeed, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 388.332067][T13409] FAULT_INJECTION: forcing a failure. [ 388.332067][T13409] name failslab, interval 1, probability 0, space 0, times 0 [ 388.386826][T13409] CPU: 1 PID: 13409 Comm: syz-executor.5 Not tainted 5.4.0-rc8 #0 [ 388.394691][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.405722][T13409] Call Trace: [ 388.405748][T13409] dump_stack+0x197/0x210 [ 388.405772][T13409] should_fail.cold+0xa/0x15 [ 388.405795][T13409] ? fault_create_debugfs_attr+0x180/0x180 [ 388.417996][T13409] ? ___might_sleep+0x163/0x2c0 [ 388.418018][T13409] __should_failslab+0x121/0x190 [ 388.418038][T13409] should_failslab+0x9/0x14 [ 388.418057][T13409] __kmalloc+0x2e0/0x770 [ 388.442525][T13409] ? __kmalloc+0x608/0x770 [ 388.446968][T13409] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 388.452709][T13409] tomoyo_realpath_from_path+0xcd/0x7b0 [ 388.457361][T13415] ------------[ cut here ]------------ [ 388.458281][T13409] tomoyo_mount_acl+0x149/0x840 [ 388.458305][T13409] ? avc_has_perm+0x376/0x610 [ 388.466161][T13415] generic_make_request: Trying to write to read-only block-device nullb0 (partno 0) [ 388.468670][T13409] ? __kasan_check_read+0x11/0x20 [ 388.468690][T13409] ? mark_lock+0xc2/0x1220 [ 388.473716][T13415] WARNING: CPU: 0 PID: 13415 at block/blk-core.c:797 generic_make_request_checks+0x1d5c/0x2210 [ 388.483236][T13409] ? avc_has_perm+0x376/0x610 [ 388.488239][T13415] Kernel panic - not syncing: panic_on_warn set ... [ 388.492636][T13409] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 388.519816][T13409] ? __kasan_check_read+0x11/0x20 [ 388.524845][T13409] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.531098][T13409] ? lock_acquire+0x190/0x410 [ 388.535766][T13409] ? tomoyo_mount_permission+0x10a/0x410 [ 388.541398][T13409] tomoyo_mount_permission+0x16a/0x410 [ 388.546848][T13409] ? tomoyo_mount_permission+0x10a/0x410 [ 388.552471][T13409] ? tomoyo_mount_acl+0x840/0x840 [ 388.557503][T13409] ? inode_has_perm+0x1b0/0x230 [ 388.562350][T13409] ? selinux_inode_getattr+0x1c0/0x1c0 [ 388.567816][T13409] ? strncpy_from_user+0x2b4/0x400 [ 388.572922][T13409] tomoyo_sb_mount+0x35/0x40 [ 388.577508][T13409] security_sb_mount+0x87/0xd0 [ 388.582264][T13409] do_mount+0x1d4/0x1b60 [ 388.586522][T13409] ? retint_kernel+0x2b/0x2b [ 388.591114][T13409] ? copy_mount_string+0x40/0x40 [ 388.596058][T13409] ? copy_mount_options+0x23c/0x3f0 [ 388.601247][T13409] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.607489][T13409] ? copy_mount_options+0x2e8/0x3f0 [ 388.612684][T13409] ksys_mount+0xdb/0x150 [ 388.616919][T13409] __x64_sys_mount+0xbe/0x150 [ 388.621613][T13409] do_syscall_64+0xfa/0x760 [ 388.626291][T13409] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 388.632184][T13409] RIP: 0033:0x45a639 [ 388.636071][T13409] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.655695][T13409] RSP: 002b:00007f536d680c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 388.669066][T13409] RAX: ffffffffffffffda RBX: 00007f536d680c90 RCX: 000000000045a639 [ 388.677041][T13409] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 01:43:09 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x65, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0xea20, 0x820, @remote, 0x4}, 0x9, [0x4, 0xf29, 0x38, 0xffffffff, 0x0, 0x5, 0x200, 0x7f]}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4000, &(0x7f0000002700)=0x3, 0x100000001000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f0000000000)='./file0\x00', 0x20) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000002680), &(0x7f00000026c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4}]}, 0x28}}, 0x0) [ 388.685009][T13409] RBP: 000000000075bf20 R08: 000000002000a000 R09: 0000000000000000 [ 388.693066][T13409] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f536d6816d4 [ 388.701025][T13409] R13: 00000000004c71c0 R14: 00000000004dc948 R15: 0000000000000003 [ 388.709022][T13415] CPU: 0 PID: 13415 Comm: syz-executor.1 Not tainted 5.4.0-rc8 #0 [ 388.716840][T13415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.727002][T13415] Call Trace: [ 388.730310][T13415] dump_stack+0x197/0x210 [ 388.734755][T13415] ? generic_make_request_checks+0x1d00/0x2210 [ 388.740921][T13415] panic+0x2e3/0x75c [ 388.744833][T13415] ? add_taint.cold+0x16/0x16 [ 388.749531][T13415] ? __kasan_check_write+0x14/0x20 [ 388.754663][T13415] ? __warn.cold+0x14/0x35 [ 388.759093][T13415] ? __warn+0xd9/0x1d0 [ 388.763185][T13415] ? generic_make_request_checks+0x1d5c/0x2210 [ 388.769618][T13415] __warn.cold+0x2f/0x35 [ 388.773976][T13415] ? generic_make_request_checks+0x1d5c/0x2210 [ 388.780169][T13415] report_bug+0x289/0x300 [ 388.784520][T13415] do_error_trap+0x11b/0x200 [ 388.789131][T13415] do_invalid_op+0x37/0x50 [ 388.793568][T13415] ? generic_make_request_checks+0x1d5c/0x2210 [ 388.799735][T13415] invalid_op+0x23/0x30 [ 388.803914][T13415] RIP: 0010:generic_make_request_checks+0x1d5c/0x2210 [ 388.808550][ T3906] kobject: 'loop2' (000000005aa16647): kobject_uevent_env [ 388.810685][T13415] Code: 00 00 44 8b ab 3c 05 00 00 48 8d b5 78 ff ff ff 4c 89 f7 e8 c6 87 05 00 48 c7 c7 60 18 e5 87 48 89 c6 44 89 ea e8 7c f9 13 fe <0f> 0b 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 [ 388.832618][T13419] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 388.837380][T13415] RSP: 0018:ffff8880580fef60 EFLAGS: 00010282 [ 388.837394][T13415] RAX: 0000000000000000 RBX: ffff8880a28e2000 RCX: 0000000000000000 [ 388.837403][T13415] RDX: 0000000000000000 RSI: ffffffff815cf766 RDI: ffffed100b01fdde [ 388.837412][T13415] RBP: ffff8880580ff060 R08: ffff88806985a0c0 R09: ffffed1015d04101 [ 388.837421][T13415] R10: ffffed1015d04100 R11: ffff8880ae820807 R12: ffff88809cdc2988 [ 388.837430][T13415] R13: 0000000000000000 R14: ffff88809cdc2980 R15: ffff8880a2916ef8 [ 388.837460][T13415] ? vprintk_func+0x86/0x189 [ 388.837490][T13415] ? trace_event_raw_event_block_rq_requeue+0x640/0x640 [ 388.837505][T13415] ? __kasan_check_read+0x11/0x20 [ 388.837523][T13415] ? __lockdep_free_key_range+0x120/0x120 [ 388.837543][T13415] generic_make_request+0x8f/0xb50 [ 388.837567][T13415] ? blk_queue_enter+0xe50/0xe50 [ 388.837588][T13415] ? lock_downgrade+0x920/0x920 [ 388.849616][ T3906] kobject: 'loop2' (000000005aa16647): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 388.851847][T13415] submit_bio+0x113/0x600 [ 388.851862][T13415] ? submit_bio+0x113/0x600 [ 388.851880][T13415] ? generic_make_request+0xb50/0xb50 [ 388.851896][T13415] ? bio_associate_blkg_from_css+0x50c/0x990 [ 388.851917][T13415] ? bio_reset+0x3b0/0x3b0 [ 388.874382][T13419] kobject: 'hwsim96' (00000000ddb35537): kobject_add_internal: parent: 'mac80211_hwsim', set: 'devices' [ 388.875812][T13415] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 388.875826][T13415] ? guard_bio_eod+0x294/0x6c0 [ 388.875839][T13415] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 388.875857][T13415] submit_bh_wbc+0x6b6/0x900 [ 388.875875][T13415] __block_write_full_page+0x7fe/0x11b0 [ 388.875887][T13415] ? bdev_evict_inode+0x5c0/0x5c0 [ 388.875902][T13415] ? __getblk_gfp+0xa10/0xa10 [ 388.875924][T13415] block_write_full_page+0x21f/0x270 [ 388.875936][T13415] ? bdev_evict_inode+0x5c0/0x5c0 [ 388.875954][T13415] blkdev_writepage+0x25/0x30 [ 388.875970][T13415] __writepage+0x66/0x110 [ 388.875985][T13415] write_cache_pages+0x80c/0x13f0 [ 388.876000][T13415] ? tag_pages_for_writeback+0x4b0/0x4b0 [ 388.876022][T13415] ? clear_page_dirty_for_io+0xde0/0xde0 [ 388.890102][T13419] kobject: 'hwsim96' (00000000ddb35537): kobject_uevent_env [ 388.891975][T13415] ? __kasan_check_read+0x11/0x20 [ 388.891997][T13415] ? __kasan_check_read+0x11/0x20 [ 388.892012][T13415] ? mark_lock+0xc2/0x1220 [ 388.892030][T13415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.892043][T13415] ? debug_smp_processor_id+0x3c/0x214 [ 388.892066][T13415] generic_writepages+0xed/0x160 [ 388.892085][T13415] ? write_cache_pages+0x13f0/0x13f0 [ 388.897082][T13419] kobject: 'hwsim96' (00000000ddb35537): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim96' [ 388.903696][T13415] ? __lockdep_free_key_range+0x120/0x120 [ 388.903718][T13415] ? wbc_attach_and_unlock_inode+0x51a/0xa00 [ 388.903732][T13415] ? find_held_lock+0x35/0x130 [ 388.903751][T13415] ? blkdev_readpages+0x40/0x40 [ 388.903763][T13415] blkdev_writepages+0x1e/0x30 [ 388.903781][T13415] do_writepages+0xfa/0x2a0 [ 388.903801][T13415] ? page_writeback_cpu_online+0x20/0x20 [ 388.903814][T13415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.903828][T13415] ? do_raw_spin_unlock+0x178/0x270 [ 388.903851][T13415] ? _raw_spin_unlock+0x2d/0x50 [ 388.921118][T13419] kobject: 'hwsim96' (00000000ddb35537): kobject_uevent_env [ 388.924797][T13415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.924818][T13415] ? wbc_attach_and_unlock_inode+0x63c/0xa00 [ 388.924840][T13415] __filemap_fdatawrite_range+0x2bc/0x3b0 [ 388.924856][T13415] ? delete_from_page_cache_batch+0xfe0/0xfe0 [ 388.924885][T13415] ? lock_downgrade+0x920/0x920 [ 388.924901][T13415] filemap_write_and_wait+0xf8/0x1e0 [ 388.924916][T13415] __blkdev_put+0x204/0x810 [ 388.924936][T13415] ? bd_set_size+0xb0/0xb0 [ 388.924952][T13415] ? wait_for_completion+0x440/0x440 [ 388.924977][T13415] blkdev_put+0x98/0x560 [ 388.924990][T13415] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 388.925005][T13415] blkdev_close+0x8b/0xb0 [ 388.925019][T13415] __fput+0x2ff/0x890 [ 388.925041][T13415] ? blkdev_put+0x560/0x560 [ 388.935742][T13419] kobject: 'hwsim96' (00000000ddb35537): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim96' [ 388.940027][T13415] ____fput+0x16/0x20 [ 388.940045][T13415] task_work_run+0x145/0x1c0 [ 388.940069][T13415] do_exit+0x904/0x2e60 [ 388.940096][T13415] ? mm_update_next_owner+0x640/0x640 [ 388.940116][T13415] ? lock_downgrade+0x920/0x920 [ 388.940138][T13415] ? _raw_spin_unlock_irq+0x28/0x90 [ 388.957663][T13409] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.960884][T13415] ? get_signal+0x392/0x2500 [ 388.960903][T13415] ? _raw_spin_unlock_irq+0x28/0x90 [ 388.960927][T13415] do_group_exit+0x135/0x360 [ 388.960947][T13415] get_signal+0x47c/0x2500 [ 388.960968][T13415] ? lock_downgrade+0x920/0x920 [ 388.961001][T13415] do_signal+0x87/0x1700 [ 388.975204][T13419] kobject: 'ieee80211' (000000005b706900): kobject_add_internal: parent: 'hwsim96', set: '(null)' [ 388.976653][T13415] ? __kasan_check_read+0x11/0x20 [ 388.976670][T13415] ? _copy_to_user+0x118/0x160 [ 388.976688][T13415] ? setup_sigcontext+0x7d0/0x7d0 [ 388.976717][T13415] ? exit_to_usermode_loop+0x43/0x380 [ 388.976729][T13415] ? do_syscall_64+0x65f/0x760 [ 388.976748][T13415] ? exit_to_usermode_loop+0x43/0x380 [ 388.983823][T13419] kobject: 'phy97' (000000000b795a9d): kobject_add_internal: parent: 'ieee80211', set: 'devices' [ 388.987221][T13415] ? lockdep_hardirqs_on+0x421/0x5e0 [ 388.987237][T13415] ? trace_hardirqs_on+0x67/0x240 [ 388.987256][T13415] exit_to_usermode_loop+0x286/0x380 [ 388.987276][T13415] do_syscall_64+0x65f/0x760 [ 388.987301][T13415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 388.987313][T13415] RIP: 0033:0x45a639 [ 388.987329][T13415] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.987337][T13415] RSP: 002b:00007f49c6f2ccf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 388.987350][T13415] RAX: fffffffffffffe00 RBX: 000000000075bfd0 RCX: 000000000045a639 [ 388.987363][T13415] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfd0 [ 388.987371][T13415] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 388.987379][T13415] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4 [ 388.987388][T13415] R13: 00007fff44fe946f R14: 00007f49c6f2d9c0 R15: 000000000075bfd4 [ 388.994512][T13415] Kernel Offset: disabled [ 389.464557][T13415] Rebooting in 86400 seconds..